CVE-2024-2432

GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

State: Published
Severity: 4.5 Medium
Published: Mar 13, 2024
Updated: Aug 28, 2024
Reserved: Mar 13, 2024

Description

A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition.

Scores

CVSS	Score	Vector	Source
3.1	4.5 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L	palo_alto

Weaknesses

CWE-269 Improper Privilege Management

Affected Products

Product	Versions
GlobalProtect AppPalo Alto Networks	5.1 to before 5.1.12Affectedfrom 5.1.12Not affected 6.0 to before 6.0.8Affectedfrom 6.0.8Not affected 6.1 to before 6.1.2Affectedfrom 6.1.2Not affected 6.2 to before 6.2.1Affectedfrom 6.2.1Not affected

References

https://security.paloaltonetworks.com/CVE-2024-2432

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.