CVE-2020-1989

Summary

An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for Linux 5.0 versions before 5.0.8; 5.1 versions before 5.1.1.

Affected Software

VendorProductVersion RangeStatus
Palo Alto NetworksGlobal Protect Agent5.0 < 5.0.8affected
Palo Alto NetworksGlobal Protect Agent5.1 < 5.1.1affected

Weaknesses

  • CWE-266: CWE-266 Incorrect Privilege Assignment

Workarounds

There are no viable workarounds for this issue.

ADP Enrichment

CVE Program Container

Additional References

References