What is CVE-2020-1991?

CVE-2020-1991 is a security advisory published by Palo Alto Networks Security Advisories with High severity. CVE-2020-1991 Traps: Insecure temporary file vulnerability may allow privilege escalation on Windows

Which CVE IDs does CVE-2020-1991 cover?

CVE-2020-1991 covers the following CVE IDs: CVE-2020-1991. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2020-1991?

CVE-2020-1991 affects 1 product, including: Traps.

CVE-2020-1991High

CVE-2020-1991 Traps: Insecure temporary file vulnerability may allow privilege escalation on Windows

Vendor

Palo Alto Networks Security Advisories

Published

April 8, 2020

Last Modified

May 12, 2020

🔗 CVE IDs covered (1)

CVE-2020-1991 →

📋 Description

An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks Traps 5.0 versions before 5.0.8; 6.1 versions before 6.1.4 on Windows; all versions of 6.0, 4.2, 4.1, and older releases on Windows. This issue does not affect Cortex XDR 7.0. This issue does not affect Traps for Linux or MacOS.

🎯 Affected products1

Traps

✅ Remediation

This issue is fixed in Traps 5.0.8, 6.1.4 and later versions. Workarounds and mitigations: There are no viable workarounds for this issue.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2020-1991