CVE-2024-0010 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal

A reflected cross-site scripting XSS vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript in the context of a user’s browser if a user clicks on a malicious link, allowing phishing attacks that could lead to credential...

CVE-2024-0009 PAN-OS: Improper IP Address Verification in GlobalProtect Gateway

An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software enables a malicious user with stolen credentials to establish a VPN connection from an unauthorized IP address...

CVE-2024-0009 PAN-OS: Improper IP Address Verification in GlobalProtect Gateway

An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software enables a malicious user with stolen credentials to establish a VPN connection from an unauthorized IP address...

CVE-2024-0009

The CVE-2024-0009 entry documents an improper IP-address verification vulnerability in Palo Alto Networks PAN-OS GlobalProtect gateway. Affected software: PAN-OS with GlobalProtect gateway (as referenced by Palo Alto Networks advisories). Root cause: improper verification in the GlobalProtect gat...

PAN-OS: Improper IP Address Verification in GlobalProtect Gateway

An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software enables a malicious user with stolen credentials to establish a VPN connection from an unauthorized IP address. Work around: No work around available...

PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal

A reflected cross-site scripting XSS vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript in the context of a user’s browser if that user clicks on a malicious link, allowing phishing attacks that could lead to credentia...

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks PAN-OS that stems from incorrect authentication in the GlobalProtect gateway feature. An attacker could exploit the vulnerability to establish a VPN...

PT-2024-1740 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: PAN-OS affected versions not specified Description: A reflected cross-site scripting XSS vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript in the context of a...

PT-2023-8666 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS affected versions not specified Description: The issue is related to an improper verification vulnerability in the GlobalProtect gateway feature of the software. This vulnerability allows a malicious user with stolen...

The vulnerability of the corporate VPN application GlobalProtect Agent, related to errors in processing input data, allows a hacker to execute arbitrary commands with elevated privileges.

The vulnerability of the corporate VPN application GlobalProtect Agent is related to errors in processing input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands with elevated privileges...

Palo Alto GlobalProtect Agent 5.2.x < 5.2.13 / 6.0.x < 6.0.5 / 6.1.x < 6.1.1 Local Privilege Escalation

The Palo Alto GlobalProtect app installed on the remote host is 5.2.x prior to 5.2.13, 6.0.x prior to 6.0.5 or 6.1.x prior to 6.1.1. Therefore, it is affected by a local privilege escalation vulnerability which enables a local service account or user with token impersonation privileges to execute...

CVE-2023-0009

A local privilege escalation PE vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated privileges...

CVE-2023-0009

A local privilege escalation PE vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated privileges...

Privilege escalation

A local privilege escalation PE vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated privileges...

CVE-2023-0009 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

A local privilege escalation PE vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated privileges...

CVE-2023-0009

CVE-2023-0009 affects the Palo Alto Networks GlobalProtect App on Windows. The vulnerability is a local privilege escalation in the GlobalProtect Agent caused by issues in input data processing, which can allow a local user or service account with token impersonation privileges to execute program...

GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

A local privilege escalation PE vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated privileges. Work around: No work around available...

PT-2023-3283 · Palo Alto Networks +1 · Globalprotect +2

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect Agent affected versions not specified Description: The issue is related to errors in processing input data in the GlobalProtect Agent. It allows an attacker to execute arbitrary commands with elevated...

Palo Alto Networks GlobalProtect 安全漏洞

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides features such as firewall monitoring and threat prevention. A security vulnerability exists in Palo Alto Networks GlobalProtect versions prior to 6.1.1 windows, prior to...

Palo Alto GlobalProtect Agent 5.2.x < 5.2.13 or 6.0.x < 6.0.4 or 6.1.x < 6.1.1 Local File Deletion

A local file deletion vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a user to delete system files from the endpoint with elevated privileges through a race condition. Note that Nessus has not tested for this issue but has instead relied only on the...