title: Global Protect Agent: Incorrect privilege assignment allows local privilege escalation
description: An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for Linux 5.0 versions before 5.0.8; 5.1 versions before 5.1.1.
problem types: CWE-266 Incorrect Privilege Assignment
affected:
{
platforms: Linux ARM
product: Global Protect Agent
vendor: Palo Alto Networks
versions:
changes: [at: 5.0.8, status: unaffected], lessThan: 5.0.8, status: affected, version: 5.0, versionType: custom
changes: [at: 5.1.1, status: unaffected], lessThan: 5.1.1, status: affected, version: 5.1, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
solutions: This issue is fixed in Global Protect Agent 5.0.8, Global Protect Agent 5.1.1 and all later versions.
workarounds: There are no viable workarounds for this issue.