← Back

CVE-2024-5915

nvd nist
Published: Aug 14, 2024Modified: Aug 20, 2024

JSON object

Loading...
5.2
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Amber
Show more
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:AmberShow less
Source: psirt@paloaltonetworks.com (Secondary)

Description

A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges.

Affected (5)

Paloaltonetworks
1 product
Globalprotect
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Paloaltonetworks
Globalprotect
From 5.1.0 to 5.1.9
Globalprotect
From 6.0.0 to 6.0.6
Globalprotect
From 6.1.0 to 6.1.5
Globalprotect
From 6.2.0 to 6.2.4
Globalprotect
Version 6.3.0

Related CWEs

CWE-732
Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (1)

Source: psirt@paloaltonetworks.com
Vendor Advisory

Timeline

No history available yet.