PT-2019-4014 · Palo Alto · Palo Alto Globalprotect Agent For Linux+1

Hanno Heinrichs · Publicado 2019-10-15 · Atualizado 2023-03-23 · CVE-2019-17436

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Palo Alto GlobalProtect Agent for Linux versions 5.0.4 and earlier Palo Alto GlobalProtect Agent for Linux versions 4.1.12 and earlier Palo Alto GlobalProtect Agent for MacOS versions 5.0.4 and earlier Palo Alto GlobalProtect Agent for MacOS versions 4.1.12 and earlier

Description The issue is related to insufficient access control in corporate VPN applications, which can be exploited to elevate privileges. A local privilege escalation exists that can allow non-root users to overwrite root files on the file system.

Recommendations For GlobalProtect Agent for Linux version 5.0.4 and earlier, update to a version later than 5.0.4 to resolve the issue. For GlobalProtect Agent for Linux version 4.1.12 and earlier, update to a version later than 4.1.12 to resolve the issue. For GlobalProtect Agent for MacOS version 5.0.4 and earlier, update to a version later than 5.0.4 to resolve the issue. For GlobalProtect Agent for MacOS version 4.1.12 and earlier, update to a version later than 4.1.12 to resolve the issue.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

BDU:2019-04545

CVE-2019-17436

Produtos afetados

Palo Alto Globalprotect Agent For Linux

Palo Alto Globalprotect Agent For Macos

Referências · 5

• https://bdu.fstec.ru/vul/2019-04545 · Nota de Segurança
• https://securityadvisories.paloaltonetworks.com/Home/Detail/200 · Nota
• https://security.paloaltonetworks.com/CVE-2019-17436 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-17436 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-17436 · Nota de Segurança