Skip to main content

Globalprotect CVE-2019-1573

LOW
Sensitive Information in Resource Not Removed Before Reuse (CWE-226)
2019-04-09 psirt@paloaltonetworks.com
2.5
CVSS 3.1 · NVD

Severity by source

NVD PRIMARY
2.5 LOW
AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Apr 09, 2019 - 22:29 nvd
LOW 2.5

DescriptionNVD

GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user.

AnalysisAI

GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to. Rated low severity (CVSS 2.5). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-226. GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user. Affected products include: Paloaltonetworks Globalprotect.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2024-3661 HIGH POC
7.6 May 06

DHCP can add routes to a client’s routing table via the classless static route option (121). Rated high severity (CVSS 7

CVE-2024-5921 HIGH POC
7.1 Nov 27

An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect

CVE-2025-4232 HIGH
8.8 Jun 13

CVE-2025-4232 is an improper neutralization of wildcards vulnerability in Palo Alto Networks GlobalProtect app for macOS

CVE-2021-3057 HIGH
8.1 Oct 13

A stack-based buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that enables a man-in-the

CVE-2023-0009 HIGH
7.8 Jun 14

A local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local u

CVE-2020-1989 HIGH
7.8 Apr 08

An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global

CVE-2025-0120 HIGH
7.1 Apr 11

A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices al

CVE-2019-17436 HIGH
7.1 Oct 16

A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlie

CVE-2024-2432 HIGH
7.0 Mar 13

A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local

CVE-2020-2032 HIGH
7.0 Jun 10

A race condition vulnerability Palo Alto Networks GlobalProtect app on Windows allows a local limited Windows user to ex

CVE-2024-8687 MEDIUM
6.9 Sep 11

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user

CVE-2017-15870 MEDIUM
6.7 Dec 11

Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to

Share

CVE-2019-1573 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy