Unrated severityNVD Advisory· Published Apr 10, 2024· Updated Aug 1, 2024

PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended

CVE-2024-3386

Description

An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic destined for domains that are not specified in Predefined Decryption Exclusions to be unintentionally excluded from decryption.

Affected products

Paloaltonetworks/Pan Osv5
Range: 9.0.0
Paloaltonetworks/Cloud NGFWcpe-rescue
Range: All
Paloaltonetworks/Prisma Access Agentcpe-rescue
Range: All

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

security.paloaltonetworks.com/CVE-2024-3386mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000