CVE-2019-1573 in GlobalProtect Agent

Resumen

por MITRE

GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow an attacker to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: Palo Alto Networks, Inc.
• Reservar: 2018-12-06
• Moderación: aceptado
• Artículo: VDB-133258
• CPE: listo
• CWE: CWE-287 (confirmado)
• CVSS: 2.5 (NVD)
• EPSS: 0.00275
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-1573
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-1573
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-1573/