Description
A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the web interface on Prisma Cloud Compute. This enables a malicious administrator to perform actions in the context of another user's browser when accessed by that other user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | Prisma Cloud Compute | 32 – < 32.05 (O’Neal - Update 5) | 32.05 (O’Neal - Update 5) |
References
- https://security.paloaltonetworks.com/CVE-2024-5906 vendor-advisory