CVE-2022-0018

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on Windows and macOS allows the local user’s credentials to be sent to the GlobalProtect portal when Single Sign-On is enabled. The behavior is described as intentional; risk is present when BYOD or differing portal...

Vulnerabilities fixed in Palo Alto GlobalProtect App

Palo Alto Networks has fixed vulnerabilities in GlobalProtect App. The vulnerabilities potentially enable a local malicious person to able to launch attacks that result in the following categories of damage: Remote code execution Administrator/Root privileges. Access to sensitive data Increased...