CVE-2024-2431: Palo Alto Networks Globalprotect

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue in the Palo Alto Networks GlobalProtect app enables a non-privileged user to disable the GlobalProtect app in configurations that allow a user to disable GlobalProtect with a passcode.

Affected products

• Palo Alto Networks Globalprotect: from 5.1.0, before 5.1.12 (fixed in 5.1.12); from 5.2.0, up to and including 5.2.13; from 6.0.0, before 6.0.4 (fixed in 6.0.4); version 6.1.0 only

Published 2024-03-13. Last modified 2026-06-17.