Severity
Medium
Analysis Summary
CVE-2023-0009
Palo Alto Networks GlobalProtect App for Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by an unspecified flaw. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to execute programs with elevated privileges.
Impact
- Privilege Escalation
Indicators Of Compromise
CVE
CVE-2023-0009
Affected Vendors
Palo Alto
Affected Products
- Palo Alto Networks GlobalProtect app for Windows 5.2
- Palo Alto Networks GlobalProtect app for Windows 6.0
- Palo Alto Networks GlobalProtect app for Windows 6.1
Remediation
Refer to Palo Alto Networks Security Advisories for patch, upgrade or suggested workaround information.