Globalprotect

DATE	CVE	VULNERABILITY TITLE	RISK
2019-04-09	CVE-2019-1573	Missing Encryption of Sensitive Data vulnerability in Paloaltonetworks Globalprotect 4.1.0/4.1.10 GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user. local high complexity paloaltonetworks CWE-311	2.5
2017-12-11	CVE-2017-15870	Unspecified vulnerability in Paloaltonetworks Globalprotect 4.0.2 Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTEM privileges via vectors involving "image path execution hijacking." local low complexity paloaltonetworks	6.7