Description (CNA)
A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM through the use of the repair functionality offered by the .msi file used to install GlobalProtect.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Palo Alto Networks / GlobalProtect App | affected 5.1; affected 6.0; affected 6.1; affected 6.2.0 before 6.2.5; affected 6.3 |
CWE
CWE-250
References
- https://security.paloaltonetworks.com/CVE-2024-9473
- https://sec-consult.com/vulnerability-lab/advisory/local-privilege-escalation-via-msi-installer-in-palo-alto-networks-globalprotect/
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.