CVE-2022-0017

HIGH

GlobalProtect 5.1-5.1.9 and 5.2-5.2.4 - Local Privilege Escalation via Improper Link Resolution

Title source: llm

Description

An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.10 on Windows. GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.5 on Windows. This issue does not affect GlobalProtect app on other platforms.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://security.paloaltonetworks.com/CVE-2022-0017

Scores

CVSS v3 7.0

EPSS 0.0004

EPSS Percentile 12.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-59

Status published

Products (1)

paloaltonetworks/globalprotect 5.1 - 5.1.10

Published Feb 10, 2022

Tracked Since Feb 18, 2026