[{"vendor":"paloaltonetworks","product":"globalprotect","defaultStatus":"unknown","cpes":["cpe:2.3:a:paloaltonetworks:globalprotect:5.1:*:*:*:*:*:*:*","cpe:2.3:a:paloaltonetworks:globalprotect:5.2:*:*:*:*:universal_windows_platform:*:*","cpe:2.3:a:paloaltonetworks:globalprotect:6.0.0:*:*:*:*:universal_windows_platform:*:*","cpe:2.3:a:paloaltonetworks:globalprotect:6.1.0:*:*:*:*:universal_windows_platform:*:*","cpe:2.3:a:paloaltonetworks:globalprotect:6.2.0:*:*:*:*:windows:*:*"],"versions":[{"version":"5.1","lessThan":"5.1.12","versionType":"custom","status":"affected"},{"version":"5.2","lessThan":"5.2.13","versionType":"custom","status":"affected"},{"version":"6.0.0","lessThan":"6.0.4","versionType":"custom","status":"affected"},{"version":"6.1.0","lessThan":"6.1.1","versionType":"custom","status":"affected"},{"version":"6.2.0","status":"unaffected"}]}]

{"timestamp":"2024-03-15T15:20:30.083812Z","id":"CVE-2024-2431","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Palo Alto Networks","product":"GlobalProtect App","defaultStatus":"unaffected","versions":[{"version":"6.0","lessThan":"6.0.4","versionType":"custom","status":"affected","changes":[{"at":"6.0.4","status":"unaffected"}]},{"version":"5.1","lessThan":"5.1.12","versionType":"custom","status":"affected","changes":[{"at":"5.1.12","status":"unaffected"}]},{"version":"5.2","lessThan":"5.2.13","versionType":"custom","status":"affected","changes":[{"at":"5.2.13","status":"unaffected"}]},{"version":"6.1","lessThan":"6.1.1","versionType":"custom","status":"affected","changes":[{"at":"6.1.1","status":"unaffected"}]},{"version":"6.2","status":"unaffected"}]}]

NVD-CWE-noinfo

OR
          *cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:-:*:* versions from (including) 5.1.0 up to (excluding) 5.1.12
          *cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:-:*:* versions from (including) 5.2.0 up to (including) 5.2.13
          *cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:-:*:* versions from (including) 6.0.0 up to (excluding) 6.0.4
          *cpe:2.3:a:paloaltonetworks:globalprotect:6.1.0:*:*:*:*:-:*:*

CVE: https://security.paloaltonetworks.com/CVE-2024-2431 Types: Vendor Advisory

Palo Alto Networks, Inc.: https://security.paloaltonetworks.com/CVE-2024-2431 Types: Vendor Advisory

https://security.paloaltonetworks.com/CVE-2024-2431

An issue in the Palo Alto Networks GlobalProtect app enables a non-privileged user to disable the GlobalProtect app in configurations that allow a user to disable GlobalProtect with a passcode.

Palo Alto Networks, Inc. AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Palo Alto Networks, Inc. CWE-269

Palo Alto Networks, Inc. https://security.paloaltonetworks.com/CVE-2024-2431 [No types assigned]