Palo Alto Networks Product Security Incident Response TeamPA-CVE-2024-2431GlobalProtect App: Local User Can Disable GlobalProtect
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
9.2%
An issue in the Palo Alto Networks GlobalProtect app enables a non-privileged user to disable the GlobalProtect app without needing the passcode in configurations that allow a user to disable GlobalProtect with a passcode.
Work around:
You can mitigate this issue by setting “Allow User to Disable GlobalProtect App” to “Disallow” or “Allow with Ticket.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| globalprotect app | lt | 6.0.4 | |
| globalprotect app | lt | 5.1.12 | |
| globalprotect app | lt | 5.2.13 | |
| globalprotect app | lt | 6.1.1 |
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
9.2%