CVE-2022-0016

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-0016
An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Networks GlobalProtect app that enables a local attacker to escalate to SYSTEM or root privileges when authenticating with Connect Before Logon under certain circumstances. This issue impacts GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.9 on Windows and MacOS. This issue does not affect the GlobalProtect app on other platforms.

7.4 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.4 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.9 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 3.4 / Impact : 10.0

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
https://security.paloaltonetworks.com/CVE-2022-0016 Vendor Advisory
https://security.paloaltonetworks.com/CVE-2022-0016 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
History

21 Nov 2024, 06:37

Type Values Removed Values Added
References () https://security.paloaltonetworks.com/CVE-2022-0016 - Vendor Advisory () https://security.paloaltonetworks.com/CVE-2022-0016 - Vendor Advisory
CVSS v2 : 6.9
v3 : 7.8 		v2 : 6.9
v3 : 7.4

17 Feb 2022, 13:54

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : 6.9
v3 : 7.8
CPE cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
CWE CWE-755
References (CONFIRM) https://security.paloaltonetworks.com/CVE-2022-0016 - (CONFIRM) https://security.paloaltonetworks.com/CVE-2022-0016 - Vendor Advisory

10 Feb 2022, 19:15

Type Values Removed Values Added
Summary An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Networks GlobalProtect app that enables a local attacker to escalate to SYSTEM or root privileges when authenticating with Connect Before Logon under certain circumstances. This issue impacts GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.9 on Windows and MacOS. This issue does not affect the GlobalProtect app on other platforms. An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Networks GlobalProtect app that enables a local attacker to escalate to SYSTEM or root privileges when authenticating with Connect Before Logon under certain circumstances. This issue impacts GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.9 on Windows and MacOS. This issue does not affect the GlobalProtect app on other platforms.

10 Feb 2022, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-02-10 18:15

Updated : 2024-11-21 06:37

NVD link : CVE-2022-0016

Mitre link : CVE-2022-0016

CVE.ORG link : CVE-2022-0016

JSON object : View

Products Affected

paloaltonetworks

  • globalprotect

apple

  • macos

microsoft

  • windows
CWE
CWE-703

Improper Check or Handling of Exceptional Conditions

CWE-755

Improper Handling of Exceptional Conditions