PT-2020-3482 · Palo Alto Networks · Pan-Os

Published 2020-05-13 · Updated 2020-05-18 · CVE-2020-1994

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions PAN-OS versions 7.1 through 8.0 PAN-OS versions 8.1 through 8.1.12 PAN-OS versions 9.0 through 9.0.6

Description A predictable temporary file vulnerability in PAN-OS allows a local authenticated user with shell access to corrupt arbitrary system files, affecting the integrity of the system. This issue is related to the unsafe use of temporary files.

Recommendations For PAN-OS versions 7.1 through 8.0, update to a version later than 8.0. For PAN-OS versions 8.1 through 8.1.12, update to version 8.1.13 or later. For PAN-OS versions 9.0 through 9.0.6, update to version 9.0.7 or later.

Fix

Weakness Enumeration

CWE-377

Related Identifiers

BDU:2020-03806

CVE-2020-1994

Affected Products

Pan-Os

References · 5

• https://osv.dev/vulnerability/CVE-2020-1994 · Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2020-1994 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-03806 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-1994 · Security Note
• https://t.me/cvenotify/3758 · Telegram Post