CVE-2020-2032

Name of the Vulnerable Software and Affected Versions Palo Alto Networks GlobalProtect app versions prior to 5.0.10 on Windows Palo Alto Networks GlobalProtect app versions prior to 5.1.4 on Windows

Description The issue exists due to insufficient checking of a shared resource's state, leading to a race condition vulnerability. This vulnerability can be exploited by a local limited Windows user to execute programs with SYSTEM privileges, but only during a GlobalProtect app upgrade.

Recommendations For GlobalProtect app versions prior to 5.0.10 on Windows, update to version 5.0.10 or later. For GlobalProtect app versions prior to 5.1.4 on Windows, update to version 5.1.4 or later.