CVE-2024-5921
Expert Analysis
Professional remediation guidance
Get tailored security recommendations from our analyst team for CVE-2024-5921. We'll provide specific mitigation strategies based on your environment and risk profile.
Description
An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint.
Please subscribe to our RSS feed https://security.paloaltonetworks.com/rss.xml to be alerted to new updates to this and other advisories.
Available Exploits
Related News
Affected Products
Affected Versions:
Affected Versions:
Affected Versions:
GitHub Security Advisories
Community-driven vulnerability intelligence from GitHub
Advisory Details
CVSS Scoring
CVSS Score
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
Advisory provided by GitHub Security Advisory Database. Published: November 27, 2024, Modified: June 27, 2025
Social Media Intelligence
Real-time discussions and threat intelligence from social platforms
Questions about 2025-2183 Vulnerability If you look at Palo's announcement here [https://security.paloaltonetworks.com/CVE-2025-2183](https://security.paloaltonetworks.com/CVE-2025-2183) If you look at the reequipment to be vulnerable. For option 1, I do not have that check box for local store, so does that mean that requirement is a negative? However for option 2 it says "GlobalProtect …