CVE-2024-2431: An issue in the Palo Alto Networks GlobalProtect app enables a non-privileged user to disable the GlobalProtect app in configurations that allow a user to…

PriorityP419medium5.5CVSS 3.1

AVLACLPRLUINSUCNINAH

EPSS

0.15%

4.9th percentile

An issue in the Palo Alto Networks GlobalProtect app enables a non-privileged user to disable the GlobalProtect app in configurations that allow a user to disable GlobalProtect with a passcode.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
palo_alto_networks	globalprotect_app	>= 5.1 < 5.1.12	5.1.12
palo_alto_networks	globalprotect_app	>= 5.2 < 5.2.13	5.2.13
palo_alto_networks	globalprotect_app	>= 6.0 < 6.0.4	6.0.4
palo_alto_networks	globalprotect_app	>= 6.1 < 6.1.1	6.1.1
paloalto	globalprotect_app	—	—
paloaltonetworks	globalprotect	—	—
paloaltonetworks	globalprotect	>= 5.1.0 < 5.1.12	5.1.12
paloaltonetworks	globalprotect	5.2.0 – 5.2.13	—
paloaltonetworks	globalprotect	>= 6.0.0 < 6.0.4	6.0.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.