Globalprotect
Approved changes feed: RSS · Atom
cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Globalprotect (a4273c05-6f11-5942-aa26-3a5257bb09e8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/globalprotect |
purl2cpe | 2026-06-01 10:16:49.859696 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8687 |
vulnerable | 2026-06-08 07:00:25.396491 |
PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes
An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstall, disable, or disconnect GlobalProtect even if the GlobalProtect app configuration would not normally permit them to do so.
Published: 2024-09-11T16:40:21.066Z
Updated: 2024-09-11T18:25:14.604Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5915 |
vulnerable | 2026-06-08 06:56:17.763178 |
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges.
Published: 2024-08-14T16:40:41.840Z
Updated: 2024-08-20T13:20:36.459Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5908 |
vulnerable | 2026-06-08 06:56:17.743995 |
GlobalProtect App: Encrypted Credential Exposure via Log Files
A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these encrypted credentials are exposed to recipients of the application logs.
Published: 2024-06-12T16:28:08.131Z
Updated: 2024-08-09T19:08:25.260Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2432 |
vulnerable | 2026-06-08 06:33:31.102343 |
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
MEDIUM (4.5)
A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition.
Published: 2024-03-13T17:51:33.908Z
Updated: 2024-08-28T15:14:21.571Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0021 |
vulnerable | 2026-06-08 05:39:09.128032 |
GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon
LOW (3.3)
An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of the connecting GlobalProtect user when authenticating using Connect Before Logon feature. This issue impacts GlobalProtect App 5.2 versions earlier than 5.2.9 on Windows. This issue does not affect the GlobalProtect app on other platforms.
Published: 2022-02-10T18:10:24.695Z
Updated: 2024-09-16T19:20:33.408Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0019 |
vulnerable | 2026-06-08 05:39:09.113748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0018 |
vulnerable | 2026-06-08 05:39:09.112949 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0017 |
vulnerable | 2026-06-08 05:39:09.111827 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0016 |
vulnerable | 2026-06-08 05:39:09.110322 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1987 |
vulnerable | 2026-06-08 05:21:03.884613 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6606 |
vulnerable | 2026-06-08 05:03:01.216950 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.