CVE-2024-9473

A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM through the use of the repair functionality offered by the .msi file used to install GlobalProtect.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:windows:*:*
cpe:2.3:a:paloaltonetworks:globalprotect:6.3.0:*:*:*:*:windows:*:*
cpe:2.3:a:paloaltonetworks:globalprotect:6.3.1:*:*:*:*:windows:*:*

History

No history.

Information

Published : 2024-10-09 17:15

Updated : 2024-11-21 09:54


NVD link : CVE-2024-9473

Mitre link : CVE-2024-9473

CVE.ORG link : CVE-2024-9473


JSON object : View

Products Affected

paloaltonetworks

  • globalprotect
CWE
CWE-250

Execution with Unnecessary Privileges

NVD-CWE-noinfo