Vulnerability · Published Apr 8, 2020 · Assigned by palo_alto

CVE-2020-1989Global Protect Agent: Incorrect privilege assignment allows local privilege escalation

High 7.0

In plain English

A high-severity security flaw in Global Protect Agent from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).

Severity (CVSS 3.1)7.0High

Exploit odds (30 days)0.3%top 81.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for Linux 5.0 versions before 5.0.8; 5.1 versions before 5.1.1.

Affected products (as reported)

Vendor	Product	Versions
Palo Alto Networks	Global Protect Agent	5.0 – before 5.0.85.1 – before 5.1.1

Weakness: CWE-266 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://security.paloaltonetworks.com/CVE-2020-1989 x_refsource_MISC