CVE-2022-0017
published 2022-02-10CVE-2022-0017: An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a…
PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.27%
18.0th percentile
An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.10 on Windows. GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.5 on Windows. This issue does not affect GlobalProtect app on other platforms.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| palo_alto_networks | globalprotect_app | >= 5.1 < 5.1.10 | 5.1.10 |
| palo_alto_networks | globalprotect_app | >= 5.2 < 5.2.5 | 5.2.5 |
| paloalto | globalprotect_app | — | — |
| paloaltonetworks | globalprotect | >= 5.1 < 5.1.10 | 5.1.10 |
| paloaltonetworks | globalprotect | >= 5.2 < 5.2.5 | 5.2.5 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VMware
VMware HCX update addresses an information disclosure vulnerability (CVE-2022-22953)
vendor_vmware·2022-06-15·CVSS 6.5
CVE-2022-22953 [MEDIUM] VMware HCX update addresses an information disclosure vulnerability (CVE-2022-22953)
VMSA-2022-0017: VMware HCX update addresses an information disclosure vulnerability (CVE-2022-22953)
VMware HCX contains an information disclosure vulnerability. VMware has evaluated the severity of this issue to be in the low severity range with a maximum CVSSv3 base score of 2.7.
CVEs: CVE-2022-22953
Affected products: VMware HCX
Palo Alto
GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation
vendor_paloalto·2022-02-09·CVSS 7.8
CVE-2022-0017 [HIGH] CWE-59 GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation
GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation
An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances.
Affected products: GlobalProtect App
Solution: This issue is fixed in GlobalProtect app 5.1.10 on Windows, GlobalProtect app 5.2.5 on Windows and all later GlobalProtect app versions.
Workaround: There are no known workarounds for this issue.
GHSA
GHSA-fv8p-4m6f-8crp: An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that ena
ghsa_unreviewed·2022-02-11
CVE-2022-0017 [HIGH] CWE-59 GHSA-fv8p-4m6f-8crp: An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that ena
An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.10 on Windows. GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.5 on Windows. This issue does not affect GlobalProtect app on other platforms.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-02-10
Published