CVE-2019-1573: falha de baixa gravidade em Palo Alto Networks GlobalProtect Agent
Information Disclosure in GlobalProtect Agent
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 2.5epss 0.3%
GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Palo Alto Networks · GlobalProtect AgentReferências
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0005https://security.paloaltonetworks.com/CVE-2019-1573https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-783https://www.kb.cert.org/vuls/id/192371http://www.securityfocus.com/bid/107868