VYPR
← All advisories
High severity7.0NVD Advisory· Published Feb 10, 2022· Updated Jun 17, 2026

CVE-2022-0017

CVE-2022-0017

Description

An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.10 on Windows. GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.5 on Windows. This issue does not affect GlobalProtect app on other platforms.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Paloaltonetworks/Globalprotect3 versions
    cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:*:*:*range: >=5.1,<5.1.10
    • (no CPE)range: 5.1 versions earlier than 5.1.10, 5.2 versions earlier than 5.2.5
    • (no CPE)range: 5.3.*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.