Palo Alto Networks has released an update to address both issues -- see v4.1.1. F5 Networks said it's been made aware that some of its VPN apps store authentication/session cookies in the OS ...

CERT also found that Palo Alto Networks GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS0 store the session cookie incorrectly in both memory and log files.

Pulse Secure Connect Secure prior to 8.1R14, 8.2, 8.3R6, and 9.0R2. Cisco AnyConnect 4.7.x and prior. CERT says that Palo Alto Networks GlobalProtect version 4.1.1 patches this vulnerability.

Palo Alto Networks Globalprotect app is used to establish VPN connections. A vulnerability allows attackers to inject malicious code and install it on vulnerable computers with elevated privileges.

The researchers detected cookie log file storage issues in Palo Alto Networks GlobalProtect Agent 4.1.0 products for Windows and Macs, as well as Pulse Secure Connect Secure products "prior to 8 ...

The researchers detected cookie log file storage issues in Palo Alto Networks GlobalProtect Agent 4.1.0 products for Windows and Macs, as well as Pulse Secure Connect Secure products "prior to 8 ...