Paloaltonetworks Globalprotect vulnerabilities

CVE-2021-3038 [MEDIUM] CWE-20 CVE-2021-3038: A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect app on Windows systems a A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death (BSOD) error. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.8; GlobalProtect a

CVE-2020-2032 [HIGH] CWE-367 CVE-2020-2032: A race condition vulnerability Palo Alto Networks GlobalProtect app on Windows allows a local limite A race condition vulnerability Palo Alto Networks GlobalProtect app on Windows allows a local limited Windows user to execute programs with SYSTEM privileges. This issue can be exploited only while performing a GlobalProtect app upgrade. This issue affects: GlobalProtect app 5.0 versions earlier than GlobalProtect app 5.0.10 on Windows; GlobalProtect ap

CVE-2020-2033 [MEDIUM] CWE-290 CVE-2020-2033: When the pre-logon feature is enabled, a missing certification validation in Palo Alto Networks Glob When the pre-logon feature is enabled, a missing certification validation in Palo Alto Networks GlobalProtect app can disclose the pre-logon authentication cookie to a man-in-the-middle attacker on the same local area network segment with the ability to manipulate ARP or to conduct ARP spoofing attacks. This allows the attacker to access the GlobalPro

CVE-2020-2004 [MEDIUM] CWE-534 CVE-2020-2004: Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnosti Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are collected for troubleshooting on GlobalProtect app (also known as GlobalProtect Agent) for MacOS and Windows. For this issue to occur all of these conditions must be true: (1) 'Save User Credential' option should be set to 'Yes' in

CVE-2020-1989 [HIGH] CWE-266 CVE-2020-1989: An incorrect privilege assignment vulnerability when writing application-specific files in the Palo An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for Linux 5.0 versions before 5.0.8; 5.1 versions before 5.1.1.

CVE-2020-1988 [MEDIUM] CWE-428 CVE-2020-1988: An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authe An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the root of the OS disk (C:\) or to Program Files directory to gain system privileges. This issue affects Palo Alto Networks GlobalProtect Agent 5.0 versions before 5.0.5; 4.1 versions before 4.1.13 o

CVE-2020-1987 [LOW] CWE-200 CVE-2020-1987: An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Networks Global Protect Agent 5.0 versions prior to 5.0.9; 5.1 versions prior to 5.1.1.

CVE-2020-1976 [MEDIUM] CWE-642 CVE-2020-1976: A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authenticated local users to cause the Mac OS kernel to hang or crash. This issue affects GlobalProtect 5.0.5 and earlier versions of GlobalProtect 5.0 on Mac OS.

CVE-2019-17436 [HIGH] CVE-2019-17436: A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X vers A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlier and version 4.1.12 and earlier, that can allow non-root users to overwrite root files on the file system.

CVE-2019-17435 [MEDIUM] CVE-2019-17435: A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and e A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature can allow for modification of a GlobalProtect Agent MSI installer package on disk before installation.

CVE-2019-1573 [LOW] CWE-226 CVE-2019-1573: GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user.

CVE-2017-15870 [MEDIUM] CVE-2017-15870: Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on t Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTEM privileges via vectors involving "image path execution hijacking."

CVE-2012-6606 [MEDIUM] CWE-310 CVE-2012-6606: Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates fr Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof portal servers and obtain sensitive information via a crafted certificate.