A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated user. However, to exploit this vulnerability, the authenticated user must navigate to a malicious page during the GlobalProtect SAML login process on a Windows device. This issue does not apply to the GlobalProtect app on other (non-Windows) platforms.
oryginał ENCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:AmberPalo Alto Networks Globalprotect
APPPaloaltonetworks6.0.0 – 6.0.11 (bez)6.1.0 – 6.1.6 (bez)6.2.0 – 6.2.5 (bez)6.3.0 – 6.3.3 (bez)
Powiązane podatności
An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks Glob...
A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows ...
An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers t...
DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based securit...
A local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables...