Skip to content
OpenAdvisories
Medium · 6.3 CVE-2023-0006 EUVD-2023-12111GHSA-g2xf-r6pf-g763

GlobalProtect App: Local File Deletion Vulnerability

Published Apr 12, 2023 · Updated Feb 7, 2025 · Assigned by palo_alto

Vendor: Palo Alto Networks Product: GlobalProtect App Category: Network devices

Description

A local file deletion vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a user to delete system files from the endpoint with elevated privileges through a race condition.

Affected products

VendorProductAffectedFixed
Palo Alto Networks GlobalProtect app 6.0 – < 6.0.4, 6.1 – < 6.1.1, 5.2 – < 5.2.13 6.0.4

References