cve/2024/CVE-2024-2432.md
2024-05-25 21:48:12 +02:00

23 lines
1.0 KiB
Markdown

### [CVE-2024-2432](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2432)
![](https://img.shields.io/static/v1?label=Product&message=GlobalProtect%20App&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-269%20Improper%20Privilege%20Management&color=brighgreen)
### Description
A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition.
### POC
#### Reference
- https://security.paloaltonetworks.com/CVE-2024-2432
#### Github
- https://github.com/Hagrid29/CVE-2024-2432-PaloAlto-GlobalProtect-EoP
- https://github.com/aneasystone/github-trending
- https://github.com/fireinrain/github-trending
- https://github.com/johe123qwe/github-trending
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/tanjiti/sec_profile