CVE-2024-5915
published 2024-08-14CVE-2024-5915: A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated…
PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.21%
11.5th percentile
A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| palo_alto_networks | globalprotect_app | — | — |
| palo_alto_networks | globalprotect_app | — | — |
| palo_alto_networks | globalprotect_app | >= 6.1 < 6.1.5 | 6.1.5 |
| palo_alto_networks | globalprotect_app | >= 6.2 < 6.2.4 | 6.2.4 |
| palo_alto_networks | globalprotect_app | >= 6.3 < 6.3.1 | 6.3.1 |
| paloalto | globalprotect_app | — | — |
| paloaltonetworks | globalprotect | — | — |
| paloaltonetworks | globalprotect | 5.1.0 – 5.1.9 | — |
| paloaltonetworks | globalprotect | 6.0.0 – 6.0.6 | — |
| paloaltonetworks | globalprotect | >= 6.1.0 < 6.1.5 | 6.1.5 |
| paloaltonetworks | globalprotect | >= 6.2.0 < 6.2.4 | 6.2.4 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv4.05.2MEDIUMCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Amber
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Palo Alto
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
vendor_paloalto·2024-08-14·CVSS 5.2
CVE-2024-5915 [MEDIUM] CWE-732 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges.
Affected products: GlobalProtect App
Solution: This issue is fixed in GlobalProtect app 5.1.x (ETA: December 2024), GlobalProtect app 6.0.10-c826, GlobalProtect app 6.1.5, GlobalProtect app 6.2.4, GlobalProtect app 6.3.1, and all later GlobalProtect app versions on Windows.
Workaround: Ensure that the GlobalProtect installation directory and its contents cannot be modified by non-administrative Windows users.
GHSA
GHSA-ch97-hpq7-jfg9: A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with
ghsa_unreviewed·2024-08-14
CVE-2024-5915 [MEDIUM] CWE-732 GHSA-ch97-hpq7-jfg9: A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with
A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-08-14
Published