CVE-2024-2432 is a medium-severity privilege escalation vulnerability affecting the Palo Alto Networks GlobalProtect app on Windows devices. This vulnerability allows a local user to execute programs with elevated privileges by exploiting a race condition. While no malicious exploitation has been reported, a proof of concept is publicly available. The issue has been addressed in specific versions of the GlobalProtect app on Windows.

How do I know if I'm affected?

To determine if you're affected by the CVE-2024-2432 vulnerability, you'll need to check if you're using the Palo Alto Networks GlobalProtect app on a Windows device. The vulnerability affects specific versions of the app, allowing a local user to execute programs with elevated privileges by exploiting a race condition. Unfortunately, the exact affected versions are not provided in the available sources. Keep in mind that no malicious exploitation has been reported, but a proof of concept is publicly available.

What should I do if I'm affected?

If you're affected by the CVE-2024-2432 vulnerability, update your GlobalProtect app to version 5.1.12, 6.0.8, 6.1.2, or 6.2.1 or later to mitigate the risk. This will help prevent potential attackers from exploiting the vulnerability and gaining elevated privileges on your system.

Is CVE-2024-2432 in CISA’s Known Exploited Vulnerabilities Catalog?

CVE-2024-2432 is not listed in CISA's Known Exploited Vulnerabilities Catalog. This medium-severity vulnerability affects the Palo Alto Networks GlobalProtect app on Windows devices, allowing a local user to execute programs with elevated privileges by exploiting a race condition. The issue has been fixed in specific versions of the app, and no malicious exploitation has been reported.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-269 involves improper privilege management, allowing a local user to execute programs with elevated privileges by exploiting a race condition in the GlobalProtect app on Windows devices.

For more details

CVE-2024-2432 is a medium-severity privilege escalation vulnerability affecting the Palo Alto Networks GlobalProtect app on Windows devices. For a comprehensive understanding of the vulnerability, including its description, severity, technical details, and known affected software configurations, refer to the NVD or the links below.

• Palo Alto Networks Security Advisory