Tomas Rzepka

Existe uma vulnerabilidade de estouro de buffer baseada em pilha no aplicativo GlobalProtect, permitindo que um invasor do tipo man-in-the-middle interrompa processos do sistema e, potencialmente, execute código arbitrário com privilégios de SISTEMA.

The issue allows for server side request forgery (SSRF) through the external request API call. This could enable an attacker to probe internal network resources and access restricted endpoints.

The issue allows remote attackers to bypass authentication and read or modify data about users, customers, and projects. This is due to the lack of validation of the registration ID.