PT-2025-15869 · Palo Alto Networks · Globalprotect
Maxime Escourbiac
+1
·
Published
2025-04-09
·
Updated
2025-04-12
·
CVE-2025-0120
CVSS v4.0
7.1
High
| Vector | AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:C/RE:M/U:Amber |
Name of the Vulnerable Software and Affected Versions:
Palo Alto Networks GlobalProtect app versions prior to 6.2.7-h3
Palo Alto Networks GlobalProtect app versions prior to 6.2.8
Palo Alto Networks GlobalProtect app version 6.3.0
Description:
A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITYSYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit.
Recommendations:
For versions prior to 6.2.7-h3, update to version 6.2.7-h3 or later.
For versions prior to 6.2.8, update to version 6.2.8 or later.
For version 6.3.0, consider disabling the vulnerable privilege management mechanism until a patch is available.
Fix
LPE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Globalprotect