CVE-2024-3386

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic destined for domains that are not specified in Predefined Decryption Exclusions to be unintentionally excluded from decryption.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-436

Affected software

VendorProductVersions
Palo Alto NetworksPAN-OS>= 9.0.0, < 9.0.17-h2; >= 9.1.0, < 9.1.17; >= 10.0.0, < 10.0.13; >= 10.1.0, < 10.1.9-h3; >= 10.1.0, < 10.1.10; >= 10.2.0, < 10.2.4-h2; >= 10.2.0, < 10.2.5; >= 11.0.0, < 11.0.1-h2; >= 11.0.0, < 11.0.2
Palo Alto NetworksCloud NGFW—
Palo Alto NetworksPrisma Access—

References

Timeline

Published
Apr 10, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-338606.5An issue was discovered in Logpoint before 7.4.0. It allows Local File Inclusion (LFI) when an arbitrary File Path is used within the File SCVE-2024-338627.5A buffer-management vulnerability in OPC Foundation OPCFoundation.NetStandard.Opc.Ua.Core before 1.05.374.54 could allow remote attackers toCVE-2024-338639.8An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion.CVE-2024-338645.9An issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template generation; i.e., via remote images in proceCVE-2024-338657.5An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/{GCVE-2024-338665.5An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/{GUID] XSS.CVE-2024-338674.8An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt.CVE-2024-338689.8An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection.CVE-2024-338695.3An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript docuCVE-2024-33875.9A weak (low bit strength) device certificate in Palo Alto Networks Panorama software enables an attacker to perform a meddler-in-the-middle CVE-2024-338706.3An issue was discovered in Artifex Ghostscript before 10.03.1. There is path traversal (via a crafted PostScript document) to arbitrary fileCVE-2024-338718.8An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver l
CVE-2024-3386: Medium severity, CVSS 5.3 | Vulnix