← CVE Intelligence

CVE-2020-2032

GlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgrade PUBLISHED

Description (CNA)

A race condition vulnerability Palo Alto Networks GlobalProtect app on Windows allows a local limited Windows user to execute programs with SYSTEM privileges. This issue can be exploited only while performing a GlobalProtect app upgrade. This issue affects: GlobalProtect app 5.0 versions earlier than GlobalProtect app 5.0.10 on Windows; GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.4 on Windows.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / GlobalProtect Appaffected 5.1 before 5.1.4; affected 5.0 before 5.0.10

CWE

CWE-367

References

ADP enrichment

CVE

No English description supplied.