Palo Alto Networks · Pan-Os · CVE-2024-3383
**Name of the Vulnerable Software and Affected Versions**
PAN-OS (affected versions not specified)
**Description**
A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowed access to resources based on existing Security Policy rules. The issue is related to insufficient access control, which can be exploited by a remote attacker to influence user access to network resources.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.