CVE-2020-2004

The CVE-2020-2004 entry affects Palo Alto Networks GlobalProtect App prior to 5.0.9 (and 5.1 prior to 5.1.2 on Windows/macOS). The root cause is that, under specific conditions, a user’s password can be logged in cleartext in PanGPS.log when troubleshooting logs are collected (Save User Credentia...

CVE-2020-1997

The CVE-2020-1997 issue is an open redirection in Palo Alto Networks PAN-OS GlobalProtect. Affected products are PAN-OS 7.1.x before 7.1.26 and 8.0.x before 8.0.14. The vulnerability allows an attacker to specify an arbitrary redirection target away from the trusted GlobalProtect gateway; when a ...

CVE-2020-1993

CVE-2020-1993 affects PAN-OS GlobalProtect Portal. The vulnerability stems from not issuing a new session identifier after a successful login, enabling session fixation if an attacker controls a user’s session ID. Affected versions include PAN-OS 7.1 and 8.0, PAN-OS 8.1 prior to 8.1.14, and PAN-O...

CVE-2020-1993 PAN-OS: GlobalProtect Portal PHP session fixation vulnerability

The GlobalProtect Portal feature in PAN-OS does not set a new session identifier after a successful user login, which allows session fixation attacks, if an attacker is able to control a user's session ID. This issue affects: All PAN-OS 7.1 and 8.0 versions; PAN-OS 8.1 versions earlier than 8.1.1...

PAN-OS: GlobalProtect registration open redirect

An open redirection vulnerability in the GlobalProtect component of Palo Alto Networks PAN-OS allows an attacker to specify an arbitrary redirection target away from the trusted GlobalProtect gateway. If the user then successfully authenticates it will cause them to access an unexpected and...

PAN-OS: GlobalProtect Portal PHP session fixation vulnerability

The GlobalProtect Portal feature in PAN-OS does not set a new session identifier after a successful user login, which allows session fixation attacks, if an attacker is able to control a user's session ID. Work around: There are no known workarounds for this issue...

GlobalProtect App: Passwords may be logged in clear text while collecting troubleshooting logs

Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are collected for troubleshooting on GlobalProtect app also known as GlobalProtect Agent for MacOS and Windows. For this issue to occur all of these conditions must be true: 1 'Sav...

PAN-OS: GlobalProtect Clientless VPN session hijacking

A cross-site scripting XSS vulnerability exists when visiting malicious websites with the Palo Alto Networks GlobalProtect Clientless VPN that can compromise the user's active session. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.0...

Palo Alto GlobalProtect Agent 4.1.x < 4.1.13 / 5.0.x < 5.0.5 Privilege Escalation

The version of Palo Alto GlobalProtect Agent installed on the remote Windows host is 4.1.x prior to 4.1.3, or 5.0.x prior to 5.0.5. It is, therefore, affected by a privilege escalation vulnerability due to a problem with the file creation permission on the OS disk. An authenticated, local attacke...

Palo Alto GlobalProtect Agent 5.0.x < 5.0.9 / 5.1.x < 5.1.1 Information Disclosure

The version of Palo Alto GlobalProtect Agent installed on the remote macOS or Mac OS X host is 5.0.x prior to 5.0.9, or 5.1.x prior to 5.1.1. It is, therefore, affected by an information disclosure vulnerability due to extra information provided when the troubleshooting log level is set to 'Dump'...

Palo Alto GlobalProtect Agent 5.0.x < 5.0.9 / 5.1.x < 5.1.1 Information Disclosure

The version of Palo Alto GlobalProtect Agent installed on the remote Windows host is 5.0.x prior to 5.0.9, or 5.1.x prior to 5.1.1. It is, therefore, affected by an information disclosure vulnerability due to extra information provided when the troubleshooting log level is set to 'Dump'. An...

Palo Alto GlobalProtect Agent Installed (macOS)

Binary data paloaltoglobalprotectagentmacinstalled.nbin...

Palo Alto Networks GlobalProtect Agent Information Disclosure Vulnerability

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, Inc. that provides firewall monitoring and threat prevention. GlobalProtect Agent is an agent program that provides firewall monitoring and threat prevention. An information disclosure vulnerabilit...

Unspecified Vulnerability in Palo Alto Networks GlobalProtect Agent

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, Inc. that provides firewall monitoring and threat prevention. GlobalProtect Agent is an agent program that provides firewall monitoring and threat prevention features. An unspecified vulnerability...

Palo Alto Networks GlobalProtect Agent Code Issue Vulnerability

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, Inc. that provides firewall monitoring and threat prevention. GlobalProtect Agent is an agent program that provides firewall monitoring and threat prevention features. A code issue vulnerability...

CVE-2020-1987

An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Networks Global Protect Agent 5.0 versio...

CVE-2020-1989

An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for...

CVE-2020-1988

An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the root of the OS disk C:\ or to Program Files directory to gain system privileges. This issue affects Palo Alto Networks GlobalProtect Agent 5...

CVE-2020-1988

An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the root of the OS disk C:\ or to Program Files directory to gain system privileges. This issue affects Palo Alto Networks GlobalProtect Agent 5...

CVE-2020-1988 Global Protect Agent: Local privilege escalation due to an unquoted search path vulnerability

An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the root of the OS disk C:\ or to Program Files directory to gain system privileges. This issue affects Palo Alto Networks GlobalProtect Agent 5...