The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.
No analysis available yet.
Vendor Workaround
No workaround or mitigation is available.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2025-14906 | An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app. The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected. |
| Link | Providers |
|---|---|
| https://security.paloaltonetworks.com/CVE-2025-0135 |
|
Fri, 27 Jun 2025 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Paloaltonetworks globalprotect
|
|
| CPEs | cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:macos:*:* | |
| Vendors & Products |
Paloaltonetworks globalprotect
|
|
| Metrics |
cvssV3_1
|
Wed, 14 May 2025 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 14 May 2025 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app. The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected. | |
| Title | GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App | |
| First Time appeared |
Paloaltonetworks
Paloaltonetworks globalprotect App |
|
| Weaknesses | CWE-266 | |
| CPEs | cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:*:*:*:*:*:* |
|
| Vendors & Products |
Paloaltonetworks
Paloaltonetworks globalprotect App |
|
| References |
| |
| Metrics |
cvssV4_0
|
Status: PUBLISHED
Assigner: palo_alto
Published:
Updated: 2025-05-14T20:50:20.200Z
Reserved: 2024-12-20T23:24:28.176Z
Link: CVE-2025-0135
Updated: 2025-05-14T20:50:17.392Z
Status : Analyzed
Published: 2025-05-14T19:15:51.817
Modified: 2025-06-27T16:50:37.817
Link: CVE-2025-0135
No data.
OpenCVE Enrichment
No data.
EUVD