Summary
generated automatically from NVD dataCVE-2024-0008 affects the management interface of Palo Alto Networks PAN-OS software, where web sessions fail to expire in certain situations. This session expiration weakness (CWE-613) leaves the interface open to unauthorized access. NVD rates it 6.6 (MEDIUM, CVSS v3.1), with a physical attack vector and user interaction required, and the potential for high impact on confidentiality, integrity and availability.
NVD description
Web sessions in the management interface in Palo Alto Networks PAN-OS software do not expire in certain situations, making it susceptible to unauthorized access.
EPSS · FIRST.org
0.50%probability of exploitation in the next 30 days
Higher than 41% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v3.1 Score
Information
- Published
- 14 févr. 2024
- Updated
- 17 juin 2026
- Status
- Analyzed
- Source
- psirt@paloaltonetworks.com
Affected products
Weaknesses (CWE)
References (2)
- https://security.paloaltonetworks.com/CVE-2024-0008Vendor Advisory
- https://security.paloaltonetworks.com/CVE-2024-0008Vendor Advisory
Similar CVEs
Other vulnerabilities of type CWE-613
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.