CVE-2022-0021 GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon

An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of the connecting GlobalProtect user when authenticating using Connect Before Logon feature. This issue impacts GlobalProtect App 5.2 versions...

CVE-2022-0021

Palo Alto Networks GlobalProtect App for Windows is affected by CVE-2022-0021. The vulnerability arises from an information exposure in the log files where cleartext credentials of the connected GlobalProtect user are logged during authentication via Connect Before Logon. Affected product/version...

Vulnerabilities fixed in Palo Alto GlobalProtect App

Palo Alto Networks has fixed vulnerabilities in GlobalProtect App. The vulnerabilities potentially enable a local malicious person to able to launch attacks that result in the following categories of damage: Remote code execution Administrator/Root privileges. Access to sensitive data Increased...