PT-2020-15263 · Palo Alto Networks · Pan-Os

Mikhail Klyuchnikov + 1 · Published 2020-09-09 · Updated 2021-02-12 · CVE-2020-2039

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions prior to 8.1.16 Palo Alto Networks PAN-OS versions prior to 9.0.10 Palo Alto Networks PAN-OS versions prior to 9.1.4 Palo Alto Networks PAN-OS versions prior to 10.0.1

Description An uncontrolled resource consumption issue allows a remote unauthenticated user to upload temporary files through the management web interface that are not properly deleted after the request is finished. This can lead to disruption of the management web interface's availability by repeatedly uploading files until available disk space is exhausted.

Recommendations For versions prior to 8.1.16, update to version 8.1.16 or later. For versions prior to 9.0.10, update to version 9.0.10 or later. For versions prior to 9.1.4, update to version 9.1.4 or later. For versions prior to 10.0.1, update to version 10.0.1 or later.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2020-2039

Affected Products

Pan-Os

References · 4

• https://security.paloaltonetworks.com/CVE-2020-2039 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-2039 · Security Note
• https://osv.dev/vulnerability/CVE-2020-2039 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/2687 · Telegram Post