Skip to content
OpenAdvisories
Medium WID-SEC-2025-1520 2 CVEs

Palo Alto Networks GlobalProtect App: Mehrere Schwachstellen

Published Jul 9, 2025 · Updated Jul 9, 2025 · de-DE

Vendor: Palo Alto Networks Product: GlobalProtect Platform: Linux Platform: macOS Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in der Palo Alto Networks GlobalProtect App ausnutzen, um einen Denial of Service Angriff durchzuführen oder seine Rechte zu erweitern.

Product

GlobalProtect von PaloAlto ist eine Sicherheitsplattform.

Vulnerabilities 2

  • High 8.4
    CVE-2025-0141

    GlobalProtect App: Privilege Escalation (PE) Vulnerability

    An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on enables a locally authenticated non administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows. The GlobalProtec…

    Palo Alto Networks GlobalProtect App GlobalProtect UWP App Network devices
  • Medium 6.8
    CVE-2025-0140

    GlobalProtect App: Non Admin User Can Disable the GlobalProtect App

    An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them…

    Palo Alto Networks GlobalProtect App GlobalProtect UWP App Network devices

Revision history

  1. #1

    Initiale Fassung

References