CVE-2024-2432

A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition.

Score

CVSS 3.1 7.0 High

Status

Analyzed - psirt@paloaltonetworks.com

Published

2024-03-13

Last modified

2024-08-28

Weaknesses

CWE-269

Affected products

• Globalprotect App (Palo Alto Networks)
• Globalprotect (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2024-2432