CVE-2012-6606 Man-in-the-middle Vulnerability in GlobalProtect

Palo Alto Networks Security Advisories / CVE-2012-6606

CVE-2012-6606 Man-in-the-middle Vulnerability in GlobalProtect

Severity 6.8 · MEDIUM

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Scope UNCHANGED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

NVD JSON

Published 2012-10-22

Updated 2012-10-22

Reference PAN-SA-2012-0018

Description

A vulnerability exists in NetConnect (all version) and GlobalPortect (1.1.6 and earlier) whereby the agent does not verify the certificate presented by the portal server, enabling a possible Man-in-the-middle attack.

This vulnerability can result in an agent connecting to an attacker-controlled server allowing the attacker to receive the username and password of the affected user.

This issue affects NetConnect (all versions); GlobalProtect (1.1.6 and earlier).

Product Status

Versions	Affected	Unaffected
NetConnect	all
GlobalProtect 1.1	<= 1.1.6	>= 1.1.7

Severity: MEDIUM

CVSSv3.1 Base Score: 6.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)

Weakness Type

CWE-310

Solution

GlobalProtect 1.1.7 and later; NetConnect is discontinued.

Workarounds and Mitigations

No mitigations available.