What is CVE-2017-15870?

CVE-2017-15870 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. CVE-2017-15870 GlobalProtect App Vulnerability

Which CVE IDs does CVE-2017-15870 cover?

CVE-2017-15870 covers the following CVE IDs: CVE-2017-15870. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2017-15870?

CVE-2017-15870 affects 1 product, including: GlobalProtect App.

CVE-2017-15870Medium

CVE-2017-15870 GlobalProtect App Vulnerability

Vendor

Palo Alto Networks Security Advisories

Published

December 6, 2017

Last Modified

December 6, 2017

🔗 CVE IDs covered (1)

CVE-2017-15870 →

📋 Description

An "image path execution hijacking" vulnerability affects the Palo Alto Networks Global Protect Client. Exploitation of this issue requires the root privileges on the local station. An attacker could exploit this vulnerability to obtain a certain level of persistence on the compromised host. (ref # GPC-4401 / CVE-2017-15870) Successful exploitation requires local administrative privileges. This issue affects GlobalProtect App for macOS 4.0.2 and earlier

🎯 Affected products1

GlobalProtect App

✅ Remediation

GlobalProtect App for macOS 4.0.3 and later Workarounds and mitigations: N/A

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2017-15870