Graham Brereton

**Name of the Vulnerable Software and Affected Versions** Palo Alto Networks GlobalProtect App on Linux devices (affected versions not specified) **Description** An incorrect privilege assignment allows a locally authenticated, non-administrative user to disable the GlobalProtect app, even if the app’s configuration would normally prevent them from doing so. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions:** Palo Alto Networks GlobalProtect App versions prior to 6.2.8-c243 **Description:** An incorrect privilege assignment allows a locally authenticated, non-administrative user to escalate privileges to root on macOS and Linux, or NTAUTHORITY SYSTEM on Windows. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected. **Recommendations:** Upgrade to GlobalProtect App version 6.2.8-c243.

**Name of the Vulnerable Software and Affected Versions:** Palo Alto Networks GlobalProtect App versions (affected versions not specified) **Description:** An incorrect privilege assignment allows a locally authenticated, non-administrative user to disable the GlobalProtect App, even when the configuration does not permit this action. The vulnerability affects macOS and Linux devices. **Recommendations:** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect App version (affected versions not specified) Description: An incorrect privilege assignment issue in the GlobalProtect App on macOS devices allows a locally authenticated non-administrative user to disable the app. The GlobalProtect app on other platforms, including Windows, Linux, iOS, Android, Chrome OS, and the GlobalProtect UWP app, are not affected. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.