PaloAlto Networks GlobalProtect: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 8.5
  CVE-2025-4232

  GlobalProtect: Authenticated Code Injection Through Wildcard on macOS

  An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non administrative user to escalate their privileges to root.

  Palo Alto Networks GlobalProtect App Network devices
  Jun 12, 2025
• Low 1.0
  CVE-2025-4227

  GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement

  An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement feature of the Palo Alto…

  Palo Alto Networks GlobalProtect App Network devices
  Jun 13, 2025

Revision history

1. 2025-06-11 #1

   Initiale Fassung

References

• Palo Alto Networks Security Advisory CVE-2025-4227 vom 2025-06-11
  https://security.paloaltonetworks.com/CVE-2025-4227
• Palo Alto Networks Security Advisory CVE-2025-4232 vom 2025-06-11
  https://security.paloaltonetworks.com/CVE-2025-4232