An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtectâ„¢ App on macOS devices enables a locally authenticated non administrative user to disable the app.
The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.
Metrics
Affected Vendors & Products
References
| Link | Providers |
|---|---|
| https://security.paloaltonetworks.com/CVE-2025-0135 |
|
History
Fri, 27 Jun 2025 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Paloaltonetworks globalprotect
|
|
| CPEs | cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:macos:*:* | |
| Vendors & Products |
Paloaltonetworks globalprotect
|
|
| Metrics |
cvssV3_1
|
Wed, 14 May 2025 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 14 May 2025 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtectâ„¢ App on macOS devices enables a locally authenticated non administrative user to disable the app. The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected. | |
| Title | GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App | |
| First Time appeared |
Paloaltonetworks
Paloaltonetworks globalprotect App |
|
| Weaknesses | CWE-266 | |
| CPEs | cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:*:*:*:*:*:* |
|
| Vendors & Products |
Paloaltonetworks
Paloaltonetworks globalprotect App |
|
| References |
| |
| Metrics |
cvssV4_0
|
Status: PUBLISHED
Assigner: palo_alto
Published: 2025-05-14T18:08:32.924Z
Updated: 2025-05-14T20:50:20.200Z
Reserved: 2024-12-20T23:24:28.176Z
Link: CVE-2025-0135
Updated: 2025-05-14T20:50:17.392Z
Status : Analyzed
Published: 2025-05-14T19:15:51.817
Modified: 2025-06-27T16:50:37.817
Link: CVE-2025-0135
No data.