PT-2020-3408 · Palo Alto Networks · Global Protect Agent For Linux

Published 2020-04-08 · Updated 2020-04-09 · CVE-2020-1989

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Global Protect Agent for Linux versions prior to 5.0.8 Palo Alto Networks Global Protect Agent for Linux versions prior to 5.1.1

Description The issue is related to incorrect privilege management in the Global Protect Agent for Linux, allowing a local authenticated user to elevate their privileges to the root level. This can be achieved by exploiting the vulnerability when the application writes specific files on the ARM platform.

Recommendations For versions prior to 5.0.8, update to version 5.0.8 or later. For versions prior to 5.1.1, update to version 5.1.1 or later.

Fix

Incorrect Privilege Assignment

Improper Privilege Management

Weakness Enumeration

CWE-266

CWE-269

Related Identifiers

BDU:2020-03731

CVE-2020-1989

Affected Products

Global Protect Agent For Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-1989 · Security Note
• https://bdu.fstec.ru/vul/2020-03731 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1989 · Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2020-1989 · Vendor Advisory