CVE-2019-1573: Information Disclosure in GlobalProtect Agent
First published: Tue Apr 09 2019(Updated: )
GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user.
Credit: psirt@paloaltonetworks.com psirt@paloaltonetworks.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Paloaltonetworks Globalprotect | <=4.1.0 | |
| Paloaltonetworks Globalprotect | <=4.1.10 | |
| <=4.1.0 | ||
| <=4.1.10 |
Remedy
This issue is fixed in GlobalProtect Agent 4.1.1 and later for Windows, and GlobalProtect Agent 4.1.11 and later for macOS.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/107868
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0005
- https://security.paloaltonetworks.com/CVE-2019-1573
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-783
- https://www.kb.cert.org/vuls/id/192371
Frequently Asked Questions
What is CVE-2019-1573?
CVE-2019-1573 is a vulnerability in GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS that allows a local authenticated attacker to access authentication and/or session tokens.
What is the severity of CVE-2019-1573?
CVE-2019-1573 has a severity rating of low (2.5).
How does CVE-2019-1573 work?
CVE-2019-1573 allows a local authenticated attacker who has compromised the end-user account to inspect memory and access authentication/session tokens, which can be replayed to spoof the VPN session.
Is there a fix for CVE-2019-1573?
Yes, PaloAlto Networks has released updates to address this vulnerability. Please refer to their official website for the latest patches.
Are there any references for CVE-2019-1573?
Yes, you can find more information about CVE-2019-1573 at the following references: [1] http://www.securityfocus.com/bid/107868, [2] https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0005, [3] https://security.paloaltonetworks.com/CVE-2019-1573
- collector/nvd-index
- agent/weakness
- agent/type
- agent/remedy
- agent/severity
- agent/references
- agent/title
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/paloaltonetworks
- canonical/paloaltonetworks globalprotect
- version/paloaltonetworks globalprotect/4.1.0
- version/paloaltonetworks globalprotect/4.1.10