PaloAlto Networks GlobalProtect: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Medium 5.5
  CVE-2024-2431

  GlobalProtect App: Local User Can Disable GlobalProtect

  An issue in the Palo Alto Networks GlobalProtect app enables a non-privileged user to disable the GlobalProtect app in configurations that allow a user to disable GlobalProtect with a passcode.

  Palo Alto Networks GlobalProtect App Network devices
  Mar 13, 2024
• Medium 4.5
  CVE-2024-2432 Public exploit

  GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

  A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race …

  Palo Alto Networks GlobalProtect App Network devices
  Mar 13, 2024

Revision history

1. 2024-11-24 #2

   Produktzuordnung überprüft

2. 2024-03-13 #1

   Initiale Fassung

References

• Palo Alto Networks Security Advisories vom 2024-03-13
  https://security.paloaltonetworks.com/CVE-2024-2431
• Palo Alto Networks Security Advisories vom 2024-03-13
  https://security.paloaltonetworks.com/CVE-2024-2432