CVE-2022-0019

creationtimestamp| type| source ---|---|--- 2022-02-22 16:53:15+00:00| seen| https://t.me/cibsecurity/37231...

CVE-2022-0019

An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that exposes the hashed credentials of GlobalProtect users that saved their password during previous GlobalProtect app sessions to other local users on the system. The exposed...

CVE-2022-0019 GlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux

An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that exposes the hashed credentials of GlobalProtect users that saved their password during previous GlobalProtect app sessions to other local users on the system. The exposed...

CVE-2022-0019

The CVE-2022-0019 entry concerns Palo Alto Networks GlobalProtect App for Linux, where saved password hashes are exposed to other local users. This local-attack exposure allows an attacker to authenticate as the target user to the GlobalProtect portal/gateway without the plaintext password. Affec...

Vulnerabilities fixed in Palo Alto GlobalProtect App

Palo Alto Networks has fixed vulnerabilities in GlobalProtect App. The vulnerabilities potentially enable a local malicious person to able to launch attacks that result in the following categories of damage: Remote code execution Administrator/Root privileges. Access to sensitive data Increased...