Vulnerability · Published May 13, 2020 · Assigned by palo_alto

CVE-2020-2013PAN-OS: Panorama context switch session cookie disclosure

High 8.3

In plain English

A high-severity security flaw in PAN-OS from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).

Severity (CVSS 3.1)8.3High

Exploit odds (30 days)0.7%top 48.4% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A cleartext transmission of sensitive information vulnerability in Palo Alto Networks PAN-OS Panorama that discloses an authenticated PAN-OS administrator's PAN-OS session cookie. When an administrator issues a context switch request into a managed firewall with an affected PAN-OS Panorama version, their PAN-OS session cookie is transmitted over cleartext to the firewall. An attacker with the ability to intercept this network traffic between the firewall and Panorama can access the administrator's account and further manipulate devices managed by Panorama. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.0 versions earlier than 9.0.6; PAN-OS 9.1 versions earlier than 9.1.1; All version of PAN-OS 8.0;

Affected products (as reported)

Vendor	Product	Versions
Palo Alto Networks	PAN-OS	8.0.*9.0 – before 9.0.67.1 – before 7.1.268.1 – before 8.1.139.1 – before 9.1.1

Weakness: CWE-319 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

References

https://security.paloaltonetworks.com/CVE-2020-2013 x_refsource_MISC