Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Palo Alto Networks GlobalProtect App 5.2.9 Clear all filters
TI-2022-00016 CVE-2022-0021 · GHSA-c8q6-g23p-58gh

GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon

Priority LOW 24

An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of the connecting GlobalProtect user when authenticating using Conn…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00224 Published 2022-02-10 Fixed in 5.2.9 CWE-532
TI-2022-00011 CVE-2022-0016 · GHSA-mrwh-mjvv-r5vh

GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon

Priority LOW 33

An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Networks GlobalProtect app that enables a local attacker to escalate to SYSTEM or root privileg…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00207 Published 2022-02-10 Fixed in 5.2.9 CWE-703