PT-2020-3407 · Palo Alto Networks+1 · Globalprotect Agent+1

Matthew Batten + 1 · Published 2020-04-08 · Updated 2020-04-09 · CVE-2020-1988

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Palo Alto Networks GlobalProtect Agent versions prior to 5.0.5 Palo Alto Networks GlobalProtect Agent 4.1 versions prior to 4.1.13 on Windows

Description The issue is related to an unquoted search path vulnerability in the Windows release of Global Protect Agent. This vulnerability allows an authenticated local user with file creation privileges on the root of the OS disk or to the Program Files directory to gain system privileges.

Recommendations For versions prior to 5.0.5, update to version 5.0.5 or later. For 4.1 versions prior to 4.1.13 on Windows, update to version 4.1.13 or later.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

BDU:2020-03730

CVE-2020-1988

Affected Products

Globalprotect Agent

Windows

References · 4

• https://bdu.fstec.ru/vul/2020-03730 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-1988 · Security Note
• https://security.paloaltonetworks.com/CVE-2020-1988 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1988 · Vendor Advisory