VYPR
← All advisories
Medium severity4.9NVD Advisory· Published Nov 14, 2024· Updated Jun 17, 2026

CVE-2024-5917

CVE-2024-5917

Description

A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a proxy, which enables the attacker to view internal network resources not otherwise accessible.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Paloaltonetworks/Panos3 versions
    cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*range: >=10.1.0,<10.1.7
    • (no CPE)
    • (no CPE)range: 10.2.0
  • Paloaltonetworks/Cloud Ngfwcpe-rescue
    Range: All

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.