PT-2020-3407
CVE-2020-1988
·
تاريخ النشر
2020-04-08
·
تاريخ التحديث
2020-04-09
الوصف من
CVSS 2.0
7.2
عاليةالمقاييسAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Palo Alto Networks GlobalProtect Agent versions prior to 5.0.5
Palo Alto Networks GlobalProtect Agent 4.1 versions prior to 4.1.13 on Windows
Description
The issue is related to an unquoted search path vulnerability in the Windows release of Global Protect Agent. This vulnerability allows an authenticated local user with file creation privileges on the root of the OS disk or to the Program Files directory to gain system privileges.
Recommendations
For versions prior to 5.0.5, update to version 5.0.5 or later.
For 4.1 versions prior to 4.1.13 on Windows, update to version 4.1.13 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾