Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2022-0021

GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of the connecting GlobalProtect user when authenticating using Connect Before Logon feature. This issue impacts GlobalProtect App 5.2 versions earlier than 5.2.9 on Windows. This issue does not affect the GlobalProtect app on other platforms.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks GlobalProtect App

  • 5.2 to < 5.2.9affected

Palo Alto Networks GlobalProtect App

  • 5.1.*unaffected
  • 5.3.*unaffected

References