High WID-SEC-2024-3118 1 CVE

PaloAlto Networks GlobalProtect: Schwachstelle ermöglicht Privilegieneskalation

Published Oct 8, 2024 · Updated Oct 8, 2024 · de-DE

Vendor: Palo Alto Networks Product: GlobalProtect Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in PaloAlto Networks GlobalProtect ausnutzen, um seine Privilegien zu erhöhen.

Product

GlobalProtect von PaloAlto ist eine Sicherheitsplattform.

Vulnerabilities 1

Medium 5.2

CVE-2024-9473

GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM through the use of the repair functionality offered …

Palo Alto Networks GlobalProtect App Network devices

Oct 9, 2024

Revision history

2024-10-08 #1
Initiale Fassung

References

SEC Consult Advisory vom 2024-10-08
https://sec-consult.com/vulnerability-lab/advisory/local-privilege-escalation-via-msi-installer-in-palo-alto-networks-globalprotect/