CVE-2022-0016CWE-703

GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon

High · published February 10, 2022

CVSS v3.1
7.4
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Networks GlobalProtect app that enables a local attacker to escalate to SYSTEM or root privileges when authenticating with Connect Before Logon under certain circumstances. This issue impacts GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.9 on Windows and MacOS. This issue does not affect the GlobalProtect app on other platforms.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00207 · 10.3th percentile
Weakness
CWE-703 · Improper Check or Handling of Exceptional Conditions
Published
2022-02-10T18:10Z
EPSS history
Timeline
  • 10 FEB 18:10Z
    GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon
    cvelistv5