← CVE Intelligence

CVE-2020-2001

PAN-OS: Panorama External control of file vulnerability leads to privilege escalation PUBLISHED

Description (CNA)

An external control of path and data vulnerability in the Palo Alto Networks PAN-OS Panorama XSLT processing logic that allows an unauthenticated user with network access to PAN-OS management interface to write attacker supplied file on the system and elevate privileges. This issue affects: All PAN-OS 7.1 Panorama and 8.0 Panorama versions; PAN-OS 8.1 versions earlier than 8.1.12 on Panorama; PAN-OS 9.0 versions earlier than 9.0.6 on Panorama.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / PAN-OSaffected 8.0.*; affected 7.1.*; affected 8.1 before 8.1.12; affected 9.0 before 9.0.6

CWE

CWE-123

References

ADP enrichment

CVE

No English description supplied.