Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
GlobalProtect-openconnect versions prior to 2.0.0 (exclusive) are affected by incorrect access control in GPService through DBUS, GUI. The way GlobalProtect-Openconnect is set up enables arbitrary users to start a VPN connection to arbitrary servers. By hosting an openconnect compatible server, the attack can redirect the entire host's traffic via their own server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Palo Alto Networks GlobalProtect 安全漏洞
Vulnerability Description
Palo Alto Networks GlobalProtect是美国Palo Alto Networks公司的一套网络防护软件。该软件可提供防火墙监控及威胁预防等功能。 GlobalProtect-openconnect 存在安全漏洞,该漏洞通过托管与 openconnect 兼容的服务器,攻击者可以通过自己的服务器重定向整个主机的流量。
CVSS Information
N/A
Vulnerability Type
N/A