CVE-2023-0006

published 2023-04-12

CVE-2023-0006: A local file deletion vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a user to delete system files from the endpoint with…

Priority P4 28 medium 6.3 CVSS 3.1

AV L AC H PR L UI N S U C N I H A H

A local file deletion vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a user to delete system files from the endpoint with elevated privileges through a race condition.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
palo_alto_networks	globalprotect_app	>= 5.2 < 5.2.13	5.2.13
palo_alto_networks	globalprotect_app	>= 6.0 < 6.0.4	6.0.4
palo_alto_networks	globalprotect_app	>= 6.1 < 6.1.1	6.1.1
paloalto	globalprotect_app	—	—
paloaltonetworks	globalprotect	—	—
paloaltonetworks	globalprotect	>= 5.2.0 < 5.2.13	5.2.13
paloaltonetworks	globalprotect	>= 6.0.0 < 6.0.4	6.0.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-367