PT-2020-3485
CVE-2020-2032
·
تاريخ النشر
2020-06-10
·
تاريخ التحديث
2020-06-16
الوصف من
CVSS 3.1
7.0
عاليةالمقاييسAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Palo Alto Networks GlobalProtect app versions prior to 5.0.10 on Windows
Palo Alto Networks GlobalProtect app versions prior to 5.1.4 on Windows
Description
The issue exists due to insufficient checking of a shared resource's state, leading to a race condition vulnerability. This vulnerability can be exploited by a local limited Windows user to execute programs with SYSTEM privileges, but only during a GlobalProtect app upgrade.
Recommendations
For GlobalProtect app versions prior to 5.0.10 on Windows, update to version 5.0.10 or later.
For GlobalProtect app versions prior to 5.1.4 on Windows, update to version 5.1.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾