CVE-2022-0017

GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation

State: Published
Severity: 7.0 High
Published: Feb 10, 2022
Updated: Sep 16, 2024
Reserved: Dec 28, 2021

Description

An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.10 on Windows. GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.5 on Windows. This issue does not affect GlobalProtect app on other platforms.

Scores

CVSS	Score	Vector	Source
3.1	7.0 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	palo_alto

Weaknesses

CWE-59 Improper Link Resolution Before File Access ('Link Following')

Affected Products

Product	Versions
GlobalProtect AppPalo Alto Networks	5.2 to before 5.2.5Affectedfrom 5.2.5Not affected 5.1 to before 5.1.10Affectedfrom 5.1.10Not affected
GlobalProtect AppPalo Alto Networks	5.3.*Not affected

References

https://security.paloaltonetworks.com/CVE-2022-0017

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.