CVE-2024-2431Medium

CVE-2024-2431 GlobalProtect App: Local User Can Disable GlobalProtect

Published
March 13, 2024
Last Modified
March 13, 2024

🔗 CVE IDs covered (1)

CVE-2024-2431 →

📋 Description

An issue in the Palo Alto Networks GlobalProtect app enables a non-privileged user to disable the GlobalProtect app without needing the passcode in configurations that allow a user to disable GlobalProtect with a passcode.

🎯 Affected products1

  • GlobalProtect App

✅ Remediation

This issue is fixed in GlobalProtect app 5.1.12, GlobalProtect app 5.2.13, GlobalProtect app 6.0.4, GlobalProtect app 6.1.1, and all later GlobalProtect app versions. Workarounds and mitigations: You can mitigate this issue by setting "Allow User to Disable GlobalProtect App" to "Disallow" or "Allow with Ticket."

🔗 References (1)