CVE-2017-15870

—

CVSS 3.0

6.7 medium

EPSS

<1%p37

Published

Dec 11, 2017 (Dec 11, 2017)

Modified

Jun 17, 2026

Description

Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTEM privileges via vectors involving "image path execution hijacking."

Vendors: paloaltonetworks
Products: globalprotect
Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.