Vulnerability · Published May 13, 2020 · Assigned by palo_alto

CVE-2020-1996PAN-OS: Panorama management server log injection

Medium 5.3

In plain English

A medium-severity missing authorization in PAN-OS from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.9%top 40.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A missing authorization vulnerability in the management server component of PAN-OS Panorama allows a remote unauthenticated user to inject messages into the management server ms.log file. This vulnerability can be leveraged to obfuscate an ongoing attack or fabricate log entries in the ms.log file This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.9.

Affected products (as reported)

Vendor	Product	Versions
Palo Alto Networks	PAN-OS	7.1.8.0.8.1 – before 8.1.149.0 – before 9.0.9

Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

References

https://security.paloaltonetworks.com/CVE-2020-1996 x_refsource_MISC