CVE-2024-5915

Summary

A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges.

Affected Software

VendorProductVersion RangeStatus
Palo Alto NetworksGlobalProtect App5.1affected
Palo Alto NetworksGlobalProtect App6.0affected
Palo Alto NetworksGlobalProtect App6.1 < 6.1.5affected
Palo Alto NetworksGlobalProtect App6.2 < 6.2.4affected
Palo Alto NetworksGlobalProtect App6.3 < 6.3.1affected

Weaknesses

  • CWE-732: CWE-732 Incorrect Permission Assignment for Critical Resource

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References