Vulnerabilities

TI-2020-01949 CVE-2020-2034 · GHSA-77qg-vcj7-f3hj

PAN-OS: OS command injection vulnerability in GlobalProtect portal

MEDIUM 45

An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacker to execute arbitrary OS commands with root privileges.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.07152 Published 2020-07-08 Fixed in 9.1.3, 9.0.9 +1 CWE-78

TI-2020-01898 CVE-2020-1982 · GHSA-hmg3-8432-r83c

PAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services

LOW 22

Certain communication between PAN-OS and cloud-delivered services inadvertently use TLS 1.0, which is known to be a cryptographically weak protocol.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.0045 Published 2020-07-08 Fixed in 9.1.3, 9.0.9 +1 CWE-326

Vulnerabilities

Filters

PAN-OS: OS command injection vulnerability in GlobalProtect portal

PAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services