Tomas Rzepka

A stack-based buffer overflow issue exists in the GlobalProtect app, allowing a man-in-the-middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges.

The issue allows for server side request forgery (SSRF) through the external request API call. This could enable an attacker to probe internal network resources and access restricted endpoints.

The issue allows remote attackers to bypass authentication and read or modify data about users, customers, and projects. This is due to the lack of validation of the registration ID.