Description
A weak (low bit strength) device certificate in Palo Alto Networks Panorama software enables an attacker to perform a meddler-in-the-middle (MitM) attack to capture encrypted traffic between the Panorama management server and the firewalls it manages. With sufficient computing resources, the attacker could break encrypted communication and expose sensitive information that is shared between the management server and the firewalls.
INFO
Published Date :
2024-04-10T17:06:36.676Z
Last Modified :
2024-08-01T20:12:06.646Z
Source :
palo_alto
AFFECTED PRODUCTS
The following products are affected by CVE-2024-3387 vulnerability.
| Vendors | Products |
|---|---|
| Paloaltonetworks |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-3387.
| URL | Resource |
|---|---|
| https://security.paloaltonetworks.com/CVE-2024-3387 |
|
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact