What is CVE-2022-0021?

CVE-2022-0021 is a security advisory published by Palo Alto Networks Security Advisories with Low severity. CVE-2022-0021 GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon

Which CVE IDs does CVE-2022-0021 cover?

CVE-2022-0021 covers the following CVE IDs: CVE-2022-0021. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2022-0021?

CVE-2022-0021 affects 1 product, including: GlobalProtect App.

CVE-2022-0021Low

CVE-2022-0021 GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon

Vendor

Palo Alto Networks Security Advisories

Published

February 9, 2022

Last Modified

February 9, 2022

🔗 CVE IDs covered (1)

CVE-2022-0021 →

📋 Description

An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of the connecting GlobalProtect user when authenticating using Connect Before Logon feature.

This issue impacts GlobalProtect App 5.2 versions earlier than 5.2.9 on Windows. This issue does not affect the GlobalProtect app on other platforms.

🎯 Affected products1

GlobalProtect App

✅ Remediation

This issue is fixed in GlobalProtect app 5.2.9 on Windows and all later GlobalProtect app versions. Workarounds and mitigations: There are no known workarounds for this issue.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2022-0021