Vulnerability · Published Apr 8, 2020 · Assigned by palo_alto
CVE-2020-1987Global Protect Agent: VPN cookie local information disclosure
Low 3.9
In plain English
A low-severity information exposure in Global Protect Agent from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Severity (CVSS 3.1)3.9Low
Exploit odds (30 days)0.3%top 77.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Networks Global Protect Agent 5.0 versions prior to 5.0.9; 5.1 versions prior to 5.1.1.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Palo Alto Networks | Global Protect Agent | 5.0 – before 5.0.95.1 – before 5.1.1 |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
References
- https://security.paloaltonetworks.com/CVE-2020-1987 x_refsource_MISC