CVE-2017-15870
medium
CVSS v3
6.7
CVSS v2
7.2
VIR risk
6.7
Description
Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTEM privileges via vectors involving "image path execution hijacking."
Predictions
Exploit likelihood
66%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| paloaltonetworks | globalprotect | {"endIncluding":"4.0.2"} | |
References
Verify integrity in audit chain (admin only). AS-IS.