Skip to content
CVE PROGRAM SOURCE RECORD4.5 Medium

CVE-2024-2432

GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks GlobalProtect App

Default version status: unaffected

  • 5.1 to < 5.1.12affected
  • 6.0 to < 6.0.8affected
  • 6.1 to < 6.1.2affected
  • 6.2 to < 6.2.1affected

References