Rewterz Threat Advisory – CVE-2023-0009 – Palo Alto Networks GlobalProtect App for Windows Vulnerability

Severity

Medium

Analysis Summary

CVE-2023-0009

Palo Alto Networks GlobalProtect App for Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by an unspecified flaw. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to execute programs with elevated privileges.

Impact

• Privilege Escalation

Indicators Of Compromise

CVE

CVE-2023-0009

Affected Vendors

Palo Alto

Affected Products

• Palo Alto Networks GlobalProtect app for Windows 5.2
• Palo Alto Networks GlobalProtect app for Windows 6.0
• Palo Alto Networks GlobalProtect app for Windows 6.1

Remediation

Refer to Palo Alto Networks Security Advisories for patch, upgrade or suggested workaround information.

Palo Alto Networks Security Advisories