CVE-2019-1573

CVE-2019-1573 describes a vulnerability in GlobalProtect Agent 4.1.0 for Windows and 4.1.10 and earlier for macOS, where a local, authenticated attacker can access authentication and/or session tokens by inspecting memory. This allows them to replay tokens, spoofing a VPN session and gaining unauthorized access as the legitimate user. The vulnerability has a low CVSS score of 2.5, indicating a local attack vector with high attack complexity and limited impact on confidentiality. There is no evidence of active exploitation, public exploit code, or inclusion in the KEV catalog, though it has garnered some community discussion and media coverage.