CVE-2023-0009: GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
Published Jun 14, 2023
·Updated
A local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated privileges.
Affected Software
3 affected components
Palo Alto Networks Globalprotect Windows<5.2.13
Palo Alto Networks Globalprotect Windows>=6.0.0<6.0.5
Palo Alto Networks Globalprotect Windows=6.1.0
Remediation
Information
This issue is fixed in GlobalProtect app 5.2.13, GlobalProtect app 6.0.5, GlobalProtect app 6.1.1, and all later GlobalProtect app versions.
Event History
Jun 14, 2023
CVE Published
via MITRE·04:31 PM
Data Sourced
via MITRE·04:31 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-0009?
CVE-2023-0009 is a local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows.
2
How does CVE-2023-0009 affect Palo Alto Networks GlobalProtect app on Windows?
CVE-2023-0009 enables a local user to execute programs with elevated privileges.
3
What is the severity of CVE-2023-0009?
CVE-2023-0009 has a severity rating of 7.8, which is considered high.
4
Which versions of Palo Alto Networks GlobalProtect app on Windows are affected by CVE-2023-0009?
Palo Alto Networks GlobalProtect app versions 5.2.13, 6.0.0 to 6.0.5, and 6.1.0 on Windows are affected by CVE-2023-0009.
5
How can I mitigate the vulnerability CVE-2023-0009?
To mitigate CVE-2023-0009, update your Palo Alto Networks GlobalProtect app to a version that is not affected by the vulnerability.