Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Palo Alto Networks Globalprotect WindowsGlobalProtect App: Local Privilege Escalation (PE) Vulnerability (Severity: MEDIUM)

Risk 72
Severity
7.8
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Amber

A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges.

Remedy

This issue is fixed in GlobalProtect app 5.1.x (ETA: December 2024), GlobalProtect app 6.0.x (ETA: November 2024), GlobalProtect app 6.1.5, GlobalProtect app 6.2.4, GlobalProtect app 6.3.1 (ETA: end of August), and all later GlobalProtect app versions on Windows.

Remedy

Ensure that the GlobalProtect installation directory and its contents cannot be modified by non-administrative Windows users.

Remedy

This issue is fixed in GlobalProtect app 5.1.x (ETA: December 2024), GlobalProtect app 6.0.10-c826, GlobalProtect app 6.1.5, GlobalProtect app 6.2.4, GlobalProtect app 6.3.1, and all later GlobalProtect app versions on Windows.
First published (updated )
CVE-2024-5915

Palo Alto Networks GlobalProtect 6.3End of life details

EOL
Jun 30, 2028
Support Ends
Jun 30, 2028

End of life: 6/30/2028, End of support: 6/30/2028, Latest version: 6.3.3-c1121

First published (updated )
latest-version-pangp-6.3

Palo Alto Networks GlobalProtect 6.3End of life details

EOL
Jun 30, 2028
Support Ends
Jun 30, 2028

End of life: 6/30/2028, End of support: 6/30/2028, Latest version: 6.3.3-c1121

First published (updated )
EOL-pangp-6.3

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203