CVE-2025-4232

High CVSS: 8.5

An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non administrative user to escalate their privileges to root.

Vendor

Paloaltonetworks

Product

Globalprotect

CWE

CWE-155

Yayın Tarihi

2025-06-13 00:15:23

Güncelleme

2025-06-27 16:47:32

Source Identifier

psirt@paloaltonetworks.com

KEV Date Added

Kategoriler

CWE-155 Globalprotect HIGH Paloaltonetworks 2025

Referanslar

https://security.paloaltonetworks.com/CVE-2025-4232

Benzer Kayıtlar

Medium

CVE-2026-0227

A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (…

Medium

CVE-2025-4614

An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to…

Medium

CVE-2025-4615

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® softwar…

Low

CVE-2025-4227

An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/g…

High

CVE-2025-4231

A command injection vulnerability in Palo Alto Networks PAN-OS® enables an authenticated administrative user to perform…

Medium

CVE-2025-0135

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a…