CVE-2022-0018

🗓️ 10 Feb 2022 18:10:20Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 72 Views

An info exposure vulnerability in Palo Alto Networks GlobalProtect app on Windows & MacOS sends local user account credentials to the portal when Single Sign-On is enabled in portal config

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2022-0018	10 Feb 202220:17	–	circl
CNNVD	GlobalProtect 信息泄露漏洞	9 Feb 202200:00	–	cnnvd
Cvelist	CVE-2022-0018 GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled	10 Feb 202218:10	–	cvelist
EUVD	EUVD-2022-15239	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Palo Alto GlobalProtect App	10 Feb 202200:00	–	ncsc
NVD	CVE-2022-0018	10 Feb 202218:15	–	nvd
OSV	CVE-2022-0018	10 Feb 202218:15	–	osv
Palo Alto Networks	GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled	9 Feb 202217:00	–	paloalto
Prion	Information disclosure	10 Feb 202218:15	–	prion

NVD

Vulners

Node

paloaltonetworks globalprotectRange5.1–5.1.10

paloaltonetworks globalprotectRange5.2–5.2.9

AND

apple macosMatch-

microsoft windowsMatch-

[
  {
    "platforms": [
      "Windows and MacOS"
    ],
    "product": "GlobalProtect App",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "5.2.9",
            "status": "unaffected"
          }
        ],
        "lessThan": "5.2.9",
        "status": "affected",
        "version": "5.2",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "5.1.10",
            "status": "unaffected"
          }
        ],
        "lessThan": "5.1.10",
        "status": "affected",
        "version": "5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "GlobalProtect App",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "5.3.*"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2022-0018

21 Nov 2024 06:37Current

6.2Medium risk

Vulners AI Score6.2

CVSS 22.6

CVSS 3.16.1 - 6.5

EPSS0.00253