What is CVE-2022-0017?

CVE-2022-0017 is a security advisory published by Palo Alto Networks Security Advisories with High severity. CVE-2022-0017 GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation

Which CVE IDs does CVE-2022-0017 cover?

CVE-2022-0017 covers the following CVE IDs: CVE-2022-0017. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2022-0017?

CVE-2022-0017 affects 1 product, including: GlobalProtect App.

CVE-2022-0017High

CVE-2022-0017 GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation

Vendor

Palo Alto Networks Security Advisories

Published

February 9, 2022

Last Modified

February 9, 2022

🔗 CVE IDs covered (1)

CVE-2022-0017 →

📋 Description

An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances.

This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.10 on Windows. GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.5 on Windows. This issue does not affect GlobalProtect app on other platforms.

🎯 Affected products1

GlobalProtect App

✅ Remediation

This issue is fixed in GlobalProtect app 5.1.10 on Windows, GlobalProtect app 5.2.5 on Windows and all later GlobalProtect app versions. Workarounds and mitigations: There are no known workarounds for this issue.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2022-0017