Skip to content
fr Sign in
7.0 High

CVE-2020-1989 An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global…

Description

An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for Linux 5.0 versions before 5.0.8; 5.1 versions before 5.1.1.

Affected products and versions

Product Affected versions Fixed in
Global Protect Agent 5.1 5.1 → < 5.1.1 5.1.1
Global Protect Agent 5.0 5.0 → < 5.0.8 5.0.8

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Global Protect Agent

The 3 CVEs of Global Protect Agent →
CVE-2020-1987 An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local… 3.9 Low CVE-2020-1988 An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local… 4.2 Medium
Track this CVE