What is CVE-2024-5906?

CVE-2024-5906 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. CVE-2024-5906 Prisma Cloud Compute: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface

Which CVE IDs does CVE-2024-5906 cover?

CVE-2024-5906 covers the following CVE IDs: CVE-2024-5906. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2024-5906?

CVE-2024-5906 affects 1 product, including: Prisma Cloud Compute.

CVE-2024-5906Medium

CVE-2024-5906 Prisma Cloud Compute: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface

Vendor

Palo Alto Networks Security Advisories

Published

June 12, 2024

Last Modified

June 12, 2024

🔗 CVE IDs covered (1)

CVE-2024-5906 →

📋 Description

A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the web interface on Prisma Cloud Compute. This enables a malicious administrator to perform actions in the context of another user's browser when accessed by that other user.

🎯 Affected products1

Prisma Cloud Compute

✅ Remediation

This issue is fixed in Prisma Cloud Compute 32.05 (O'Neal - Update 5) and all later versions.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2024-5906