What is PAN-SA-2014-0006?

PAN-SA-2014-0006 is a security advisory published by Palo Alto Networks Security Advisories with High severity. PAN-SA-2014-0006 Privilege escalation in GlobalProtect App for Mac OS X

Why does PAN-SA-2014-0006 have no CVE ID yet?

Palo Alto Networks Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by PAN-SA-2014-0006?

PAN-SA-2014-0006 affects 1 product, including: GlobalProtect App.

PAN-SA-2014-0006HighDisclosed before NVD

PAN-SA-2014-0006 Privilege escalation in GlobalProtect App for Mac OS X

Vendor

Palo Alto Networks Security Advisories

Published

December 10, 2014

Last Modified

December 10, 2014

📋 Description

A path injection vulnerability affecting the GlobalProtect App for Mac OS X 2.1.0 and earlier could allow a local attacker to gain elevated privileges on a targeted system. Successful exploitation of this vulnerability results in a lower privileged user obtaining elevated privileges. A local attacker could exploit this vulnerability to execute arbitrary code in the security context of the local system. This issue affects GlobalProtect app version 2.1.0 and earlier for Mac OS X.

🎯 Affected products1

GlobalProtect App

✅ Remediation

GlobalProtect 2.1.1 for Mac OS X addresses the issue described in this advisory. Workarounds and mitigations: N/A

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/PAN-SA-2014-0006