Analysis Summary

CVE-2024-5914 CVSS:7.3

Palo Alto Networks Cortex XSOAR could allow a remote attacker to execute arbitrary commands on the system, caused by a command injection vulnerability in CommonScripts Pack. An attacker could exploit this vulnerability to execute arbitrary commands within the context of an integration container.

CVE-2024-5916 CVSS:4.9

Palo Alto Networks PAN-OS could allow a remote authenticated attacker to obtain sensitive information, caused by an information exposure vulnerability. A read-only administrator who has access to the config log, can read secrets, passwords, and tokens to external systems.

CVE-2024-5915 CVSS:4.3

An unspecified error in Palo Alto Networks GlobalProtect app could allow a local attacker to gain elevated privileges on the system.

Impact

• Code Execution
• Privilege Escalation

Indicators of Compromise

CVE

• CVE-2024-5914
• CVE-2024-5916
• CVE-2024-5915

Affected Vendors

Remediation

Refer to Palo Alto Networks Security Advisories for patch, upgrade or suggested workaround information.

CVE-2024-5914

CVE-2024-5916

CVE-2024-5915