cveboard RSS feed

CVE-2024-2433

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss

An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only administrator to upload files using the web interface and completely fill one of the disk partitions with those uploaded files, which prevents the ability to log into the web interface or to download PAN-OS, WildFire, and content images. This issue affects only the web interface of the management plane; the dataplane is unaffected.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

PAN-OS

Vendor
Palo Alto Networks
Product
PAN-OS
Platforms
  • Panorama
Default status
unaffected
PAN-OS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
9.0affectedcustom9.0.17-h4Unavailable
  1. 9.0.17-h4 → unaffected
9.1affectedcustom9.1.17Unavailable
  1. 9.1.17 → unaffected
10.1affectedcustom10.1.12Unavailable
  1. 10.1.12 → unaffected
10.2affectedcustom10.2.8Unavailable
  1. 10.2.8 → unaffected
11.0affectedcustom11.0.3Unavailable
  1. 11.0.3 → unaffected
11.1unaffectedUnavailableUnavailableUnavailableNone listed

Cloud NGFW

Vendor
Palo Alto Networks
Product
Cloud NGFW
Platforms
Unknown
Default status
unaffected
Cloud NGFW · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
AllunaffectedUnavailableUnavailableUnavailableNone listed

Prisma Access

Vendor
Palo Alto Networks
Product
Prisma Access
Platforms
Unknown
Default status
unaffected
Prisma Access · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
AllunaffectedUnavailableUnavailableUnavailableNone listed