NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2019-1573

CVSS 3.1: 2.5 low
EPSS: <1%p19
Published: Apr 9, 2019 · Apr 9, 2019
Modified: Jun 17, 2026

Analyze CVE-2019-1573 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user.

Vendors: paloaltonetworks

Products: globalprotect

Weakness: CWE-226, CWE-311

Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

4 stories

RDP and VPN use soars, increasing enterprise cyber risk

Help Net SecurityNov 14, 12:29 UTC · Nov 14, 2023Exploit / PoCExploitedCVE-2019-1573 CVE-2019-11510 CVE-2018-133795

60

Week in review: Password-less security, WPA3 design flaws, new Windows 10 update controls

Help Net SecurityMay 13, 13:23 UTC · May 13, 2020RansomwareExploitedCVE-2019-1573 CVE-2019-02112 · 1 read

60

VPN apps insecurely store session cookies in memory and log files

Security AffairsApr 12, 10:17 UTC · Apr 12, 2019Data breachCVE-2019-15733 · 1 read

60

Enterprise VPN apps store authentication and session cookies insecurely

Help Net SecurityApr 12, 00:00 UTC · Apr 12, 2019VulnerabilityCVE-2019-15733

35