PT-2019-2081 · Palo Alto Networks · Globalprotect Agent

Published 2019-04-09 · Updated 2024-02-27 · CVE-2019-1573

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GlobalProtect Agent version 4.1.0 for Windows GlobalProtect Agent versions 4.1.10 and earlier for macOS

Description The issue is related to weaknesses in the authentication procedure of the GlobalProtect Agent, which may allow a local authenticated attacker to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user. This could enable an attacker to impersonate the user and gain unauthorized access.

Recommendations For GlobalProtect Agent version 4.1.0 for Windows: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For GlobalProtect Agent versions 4.1.10 and earlier for macOS: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-226

CWE-287

CWE-311

Related Identifiers

BDU:2019-01830

CVE-2019-1573

Affected Products

Globalprotect Agent

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2019-1573 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1573 · Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2019-1573 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01830 · Security Note
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0005 · Note
• https://securityadvisories.paloaltonetworks.com · Note
• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-783 · Note
• https://kb.cert.org/vuls/id/192371 · Note
• http://securityfocus.com/bid/107868 · Note
• https://xakep.ru/2019/04/15/corp-vpn-flaws · Note
• https://t.me/cvenotify/72498 · Telegram Post