CVE-2021-3038

A denial-of-service DoS vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death BSOD error. This issue impacts: GlobalProtect app 5.1 versions...

Denial of service

A denial-of-service DoS vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death BSOD error. This issue impacts: GlobalProtect app 5.1 versions...

CVE-2021-3038

The CVE-2021-3038 entry describes a DoS vulnerability in Palo Alto Networks GlobalProtect app for Windows. A local user can send specially crafted input that can trigger a BSOD. Affected versions are GlobalProtect app 5.1.x before 5.1.8 and 5.2.x before 5.2.4. Remediation is to update to GlobalPr...

CVE-2021-3038 GlobalProtect App: Windows VPN kernel driver denial of service (DoS)

A denial-of-service DoS vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death BSOD error. This issue impacts: GlobalProtect app 5.1 versions...

PT-2021-18724 · Palo Alto Networks +1 · Globalprotect +1

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect app versions prior to 5.1.8 Palo Alto Networks GlobalProtect app versions prior to 5.2.4 Description: A denial-of-service DoS issue in the GlobalProtect app on Windows systems allows a limited Windows user to...

Palo Alto Networks GlobalProtect Denial of Service Vulnerability

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides firewall monitoring and threat prevention. A security vulnerability exists in the GlobalProtect app that allows local users to perform Denial of Service DoS attacks. No...

CVE-2021-3038

A denial-of-service DoS vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death BSOD error. This issue impacts: GlobalProtect app 5.1 versions...

GlobalProtect App: Windows VPN kernel driver denial of service (DoS)

A denial-of-service DoS vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death BSOD error. Work around: No work around available...

Palo Alto Networks GlobalProtect 输入验证错误漏洞

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides firewall monitoring and threat prevention. A security vulnerability exists in the GlobalProtect app that allows local users to perform Denial of Service DoS attacks. No...

The vulnerability of the GlobalProtect SSL VPN implementation in the PAN-OS operating system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the GlobalProtect SSL VPN implementation for the PAN-OS operating system is related to errors in the certificate authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Palo Alto Networks PAN-OS 8.1.x < 8.1.17 / 9.0.x < 9.0.11 / 9.1.x < 9.1.5 / 10.0.x < 10.0.1 Authentication Bypass Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.17 or 9.0.x prior to 9.0.11 or 9.1.x prior to 9.1.5 or 10.0.x prior to 10.0.1. It is, therefore, affected by a vulnerability. - An authentication bypass vulnerability exists in the GlobalProtect SSL VPN...

CVE-2020-2050

An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to...

CVE-2020-2050

An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to...

Authentication flaw

An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to...

CVE-2020-2050

This CVE concerns Palo Alto Networks PAN-OS GlobalProtect SSL VPN authentication bypass. The GlobalProtect SSL VPN component permits bypassing all client certificate checks with an invalid certificate, enabling a remote attacker to authenticate as any user and access restricted VPN resources when...

CVE-2020-2050 PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verification

An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to...

Vulnerabilities fixed in PAN OS

Palo Alto has fixed several vulnerabilities in PAN OS. The most serious vulnerability, with attribute CVE-2020-2050, is rated by Palo Alto rated with a CVSS score of 8.2 and is located in the GlobalProtect SSL VPN component. An unauthenticated malicious party can remotely exploit this vulnerabili...

PAN-OS: Authentication bypass vulnerability in GlobalProtect client certificate verification

An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to...

PAN-OS: OS command injection vulnerability in the management web interface

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. Work around: Until PAN-OS software is upgraded to a fixed version, enabling signatures for Unique Threat ID 59954 on traffic...

PAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file upload

An uncontrolled resource consumption vulnerability in Palo Alto Networks PAN-OS allows for a remote unauthenticated user to upload temporary files through the management web interface that are not properly deleted after the request is finished. It is possible for an attacker to disrupt the...