TunnelVision Vulnerability on Prisma Access via GlobalProtect Agent?

hgosal — Tue, 11 Jun 2024 15:56:13 GMT

https://security.paloaltonetworks.com/CVE-2024-3661

The advisory states Prisma Access is unaffected by the TunnelVision vulnerability. However, to use Prisma Access, it must be done through the GlobalProtect agent itself.

I looked at my GlobalProtect agent configuration and we do have the affected settings but we do not use GlobalProtect itself, only the GP agent for Prisma Access.

Does this mean we are still affected?

topic TunnelVision Vulnerability on Prisma Access via GlobalProtect Agent? in GlobalProtect Discussions

TunnelVision Vulnerability on Prisma Access via GlobalProtect Agent?