CVEvulnerability

CVE-2024-3386

5.3 MEDIUM Published 2024-04-10 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-04-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-436

Description

An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic destined for domains that are not specified in Predefined Decryption Exclusions to be unintentionally excluded from decryption.

Affected configurations

• paloaltonetworks pan-os (>= 9.0.0 < 9.0.16) • paloaltonetworks pan-os (>= 9.1.0 < 9.1.17) • paloaltonetworks pan-os (>= 10.0.0 < 10.0.13) • paloaltonetworks pan-os (>= 10.1.0 <= 10.1.8) • paloaltonetworks pan-os (>= 10.2.0 < 10.2.4) • paloaltonetworks pan-os (>= 11.0.0 < 11.0.1) • paloaltonetworks pan-os 9.0.17 • paloaltonetworks pan-os 10.1.9 • paloaltonetworks pan-os 10.2.4 • paloaltonetworks pan-os 11.0.1

Related

Weakness · CWE (1)

  • CWE-436 Interpretation Conflict weakness

References