APT Just Means Another Path Traversal

New Zero Day in Palo Alto GlobalProtect VPN Appliances

Introduction

On April 12th, Volexity announced they discovered zero day exploitation occurring against Palo Alto GlobalProtect VPN appliances running PAN-OS 10.2 and above. For those keeping track, this is the fourth vulnerability in an SSL VPN appliance in as many months of 2024. At the time of this writing, Palo Alto has assigned CVE-2024-3400 and is still in the process of releasing patches. On April 16th, Watchtowr released a blog …

alto april apt exploitation globalprotect introduction palo palo alto pan pan-os path path traversal running ssl ssl vpn track volexity vpn vulnerability