Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mv4m-c9mp-36jr

Опубликовано: 13 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.2
CVSS3: 8.1

Описание

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.

The GlobalProtect app on iOS is not affected.

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.

The GlobalProtect app on iOS is not affected.

EPSS

Процентиль: 32%
0.00392
Низкий

5.2 Medium

CVSS4

8.1 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

nvd
3 месяца назад

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.

CVSS3: 8.8
fstec
3 месяца назад

Уязвимость программного средства для обеспечения безопасного удаленного доступа к данным Palo Alto Networks GlobalProtect App, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю реализовать атаку типа «человек посередине» и выполнить произвольный код

EPSS

Процентиль: 32%
0.00392
Низкий

5.2 Medium

CVSS4

8.1 High

CVSS3

Дефекты

CWE-787