CVE-2019-17435

5.5MEDIUM

Key Information:

Vendor
Palo Alto Networks
Status
Globalprotect Agent For Windows
Vendor
CVE Published:
16 October 2019

Summary

A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature can allow for modification of a GlobalProtect Agent MSI installer package on disk before installation.

Affected Version(s)

GlobalProtect Agent for Windows 5.0.3 and earlier

GlobalProtect Agent for Windows 4.1.12 and earlier

References

https://security.paloaltonetworks.com/CVE-2019-17435
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.