Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in PaloAlto Networks GlobalProtect ausnutzen, um seine Privilegien zu erhöhen, und um einen Denial of Service Angriff durchzuführen.
Product
GlobalProtect von PaloAlto ist eine Sicherheitsplattform.
Vulnerabilities 2
-
High 7.1
GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK
An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges t…
-
Medium 5.2
GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app. The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and Glob…
Revision history
-
#1
Initiale Fassung
References
-
Palo Alto Networks Security Advisories vom 2025-05-14
https://security.paloaltonetworks.com/CVE-2025-0131
-
Palo Alto Networks Security Advisories vom 2025-05-14
https://security.paloaltonetworks.com/CVE-2025-0135