CVE-2024-8691
PAN-OS: User Impersonation in GlobalProtect Portal
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
PAN-OS: User Impersonation in GlobalProtect Portal
A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect user to impersonate another GlobalProtect user. Active GlobalProtect users impersonated by an attacker who is exploiting this vulnerability are disconnected from GlobalProtect. Upon exploitation, PAN-OS logs indicate that the impersonated user authenticated to GlobalProtect, which hides the identity of the attacker.
Reserved 2024-09-11 | Published 2024-09-11 | Updated 2024-09-11 | Assigner palo_alto| 2024-09-11: | Initial publication |
Claudiu Pancotan
security.paloaltonetworks.com/CVE-2024-8691
Support options
