Skip to content
fr Sign in
5.5 Medium

CVE-2024-5908 A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for…

Description

A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these encrypted credentials are exposed to recipients of the application logs.

Affected products and versions

Product Affected versions Fixed in
GlobalProtect App 6.2 6.2.0 → < 6.2.3 6.2.3
GlobalProtect App 6.1 6.1.0 → < 6.1.3 6.1.3
GlobalProtect App 6.0 6.0.0 → < 6.0.8 6.0.8
GlobalProtect App 5.1 5.1.0 → < 5.1.12 5.1.12
globalprotect 6.2 6.2.0 → < 6.2.3 6.2.3

References

Timeline

  1. Published
  2. Last modified

Other CVEs of GlobalProtect App

The 41 CVEs of GlobalProtect App →
CVE-2026-0314 A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low… 4.3 Medium CVE-2026-0315 A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate… 5.9 Medium CVE-2026-0307 Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user… 5.9 Medium CVE-2026-0299 Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to… 5.9 Medium
Track this CVE