Skip to content
CVE PROGRAM SOURCE RECORD5.2 Medium

CVE-2024-9473

GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM through the use of the repair functionality offered by the .msi file used to install GlobalProtect.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks GlobalProtect App

Default version status: unaffected

  • 5.1affected
  • 6.0affected
  • 6.1affected
  • 6.2.0 to < 6.2.5affected
  • 6.3affected

References