Описание
A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowed access to resources based on your existing Security Policy rules.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
7.4 High
CVSS3
9.1 Critical
CVSS3
Дефекты
Связанные уязвимости
A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowed access to resources based on your existing Security Policy rules.
Уязвимость операционной системы PAN-OS, связанная с недостатками разграничения доступа, позволяющая нарушителю повлиять на доступ пользователей к сетевым ресурсам
EPSS
7.4 High
CVSS3
9.1 Critical
CVSS3