CVE-2024-2431

GlobalProtect App: Local User Can Disable GlobalProtect

State: Published
Severity: 5.5 Medium
Published: Mar 13, 2024
Updated: Aug 5, 2024
Reserved: Mar 13, 2024

Description

An issue in the Palo Alto Networks GlobalProtect app enables a non-privileged user to disable the GlobalProtect app in configurations that allow a user to disable GlobalProtect with a passcode.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	palo_alto

Weaknesses

CWE-269 Improper Privilege Management

Affected Products

Product	Versions
GlobalProtect AppPalo Alto Networks	6.0 to before 6.0.4Affectedfrom 6.0.4Not affected 5.1 to before 5.1.12Affectedfrom 5.1.12Not affected 5.2 to before 5.2.13Affectedfrom 5.2.13Not affected 6.1 to before 6.1.1Affectedfrom 6.1.1Not affected 6.2Not affected

References

https://security.paloaltonetworks.com/CVE-2024-2431

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.