GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation
An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint.
Please subscribe to our RSS feed https://security.paloaltonetworks.com/rss.xml to be alerted to new updates to this and other advisories.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
GlobalProtect App
Vendor
Palo Alto Networks
Product
GlobalProtect App
Platforms
Windows
Default status
unaffected
GlobalProtect App · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.3.0
affected
custom
6.3.2
Unavailable
6.3.2 → unaffected
6.2.0
affected
custom
6.2.6
Unavailable
6.2.6 → unaffected
6.1.0
affected
custom
Unavailable
Unavailable
None listed
GlobalProtect App
Vendor
Palo Alto Networks
Product
GlobalProtect App
Platforms
macOS
Default status
unaffected
GlobalProtect App · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.3.0
affected
custom
6.3.2
Unavailable
6.3.2 → unaffected
6.2.0
affected
custom
6.2.6-c857
Unavailable
6.2.6-c857 → unaffected
6.1.0
affected
custom
Unavailable
Unavailable
None listed
GlobalProtect App
Vendor
Palo Alto Networks
Product
GlobalProtect App
Platforms
Linux
Default status
unaffected
GlobalProtect App · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.2.0
affected
custom
6.2.1-c31
Unavailable
6.2.1-c31 → unaffected
6.1.0
affected
custom
Unavailable
Unavailable
None listed
GlobalProtect App
Vendor
Palo Alto Networks
Product
GlobalProtect App
Platforms
Android
Default status
unaffected
GlobalProtect App · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.1.0
affected
custom
6.1.6
Unavailable
None listed
GlobalProtect App
Vendor
Palo Alto Networks
Product
GlobalProtect App
Platforms
iOS
Default status
unaffected
GlobalProtect App · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.1.0
affected
custom
6.1.7
Unavailable
6.1.7 → unaffected
GlobalProtect App
Vendor
Palo Alto Networks
Product
GlobalProtect App
Platforms
FIPS-CC mode
Default status
unaffected
GlobalProtect App · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.0.0
unaffected
custom
Unavailable
Unavailable
None listed
5.1.0
unaffected
custom
Unavailable
Unavailable
None listed
GlobalProtect App
Vendor
Palo Alto Networks
Product
GlobalProtect App
Platforms
Windows UWP
Default status
unaffected
GlobalProtect App · Scoped product and version facts