CVE-2023-0009

Summary

A local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated privileges.

Affected Software

VendorProductVersion RangeStatus
Palo Alto NetworksGlobalProtect App6.2unaffected
Palo Alto NetworksGlobalProtect App6.1 < 6.1.1affected
Palo Alto NetworksGlobalProtect App6.0 < 6.0.5affected
Palo Alto NetworksGlobalProtect App5.2 < 5.2.13affected

Weaknesses

  • CWE-807: CWE-807: Reliance on Untrusted Inputs in a Security Decision

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References