CVE-2017-15870

CVE-2017-15870 describes a privilege escalation vulnerability in Palo Alto Networks GlobalProtect Agent versions prior to 4.0.3. An attacker with local administration rights can exploit "image path execution hijacking" to gain SYSTEM privileges. This medium-severity flaw (CVSS 6.7) has a local attack vector and low complexity, allowing for high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion, though it did receive limited media coverage.