What is CVE-2020-1997?

CVE-2020-1997 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. CVE-2020-1997 PAN-OS: GlobalProtect registration open redirect

Which CVE IDs does CVE-2020-1997 cover?

CVE-2020-1997 covers the following CVE IDs: CVE-2020-1997. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2020-1997?

CVE-2020-1997 affects 1 product, including: PAN-OS.

CVE-2020-1997Medium

CVE-2020-1997 PAN-OS: GlobalProtect registration open redirect

Vendor

Palo Alto Networks Security Advisories

Published

May 13, 2020

Last Modified

May 13, 2020

🔗 CVE IDs covered (1)

CVE-2020-1997 →

📋 Description

An open redirection vulnerability in the GlobalProtect component of Palo Alto Networks PAN-OS allows an attacker to specify an arbitrary redirection target away from the trusted GlobalProtect gateway. If the user then successfully authenticates it will cause them to access an unexpected and potentially malicious website.

This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.0 versions earlier than 8.0.14.

🎯 Affected products1

PAN-OS

✅ Remediation

This issue is fixed in PAN-OS 7.1.26, PAN-OS 8.0.14, and all later PAN-OS versions.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2020-1997