Описание
GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user.
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Одно из
EPSS
2.5 Low
CVSS3
1.9 Low
CVSS2
Дефекты
Связанные уязвимости
GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user.
Уязвимость VPN-приложения GlobalProtect Agent, связанная с недостатками процедуры аутентификации, позволяющая нарушителю подделать VPN-сеанс и получить доступ от имени пользователя
EPSS
2.5 Low
CVSS3
1.9 Low
CVSS2