CVE-2024-5917

No fix known EPSS <1%CVSS 2.1

A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a proxy, which enables the attacker to view internal network resources not otherwise accessible.

Published 2024-11-14 · CVE record · OSV

Products: Palo Alto Networks Cloud NGFW, Palo Alto Networks PAN-OS, paloaltonetworks cloud_ngfw, paloaltonetworks pan-os