CVE-2020-2021

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Pan-Os

When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate' option is disabled (unchecked), improper verification of signatures in PAN-OS SAML authentication enables an unauthenticated network-based attacker to access protected resources. The attacker must have network access to the vulnerable server to exploit this vulnerability. This issue affects PAN-OS 9.1 versions earlier than PAN-OS 9.1.3; PAN-OS 9.0…

29. Jun 2020

Ausgewertete Quellen

• Hersteller
  https://security.paloaltonetworks.com/CVE-2020-2021
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-2021
• CISA
  Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
• NVD
  CVE-2020-2021