CVE-2020-1994
4.1
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N
Summary
A predictable temporary file vulnerability in PAN-OS allows a local authenticated user with shell access to corrupt arbitrary system files affecting the integrity of the system. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.0 versions earlier than 9.0.7.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Palo Alto Networks | PAN-OS | 7.1.* | affected |
| Palo Alto Networks | PAN-OS | 8.0.* | affected |
| Palo Alto Networks | PAN-OS | 8.1 < 8.1.13 | affected |
| Palo Alto Networks | PAN-OS | 9.0 < 9.0.7 | affected |
| Palo Alto Networks | PAN-OS | 9.1.0 < 9.1* | unaffected |
Weaknesses
- CWE-377: CWE-377 Insecure Temporary File
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.