NetSight
high7.8

CVE-2024-9473

A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticated non-administrative Windows user to e…

Impact

A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM through the use of the repair functionality offered by the .msi file used to install GlobalProtect.

Affected products

VendorProductAffected versions
PaloaltonetworksGlobalprotect
from 5.1 before 6.2.5
Versions 6.3.0, 6.3.1

Weakness classification

References