What is PAN-SA-2020-0002?

PAN-SA-2020-0002 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. PAN-SA-2020-0002 PAN-OS: OpenSSH software upgraded to resolve multiple vulnerabilities

Why does PAN-SA-2020-0002 have no CVE ID yet?

Palo Alto Networks Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by PAN-SA-2020-0002?

PAN-SA-2020-0002 affects 1 product, including: PAN-OS.

PAN-SA-2020-0002MediumDisclosed before NVD

PAN-SA-2020-0002 PAN-OS: OpenSSH software upgraded to resolve multiple vulnerabilities

Vendor

Palo Alto Networks Security Advisories

Published

April 8, 2020

Last Modified

April 8, 2020

📋 Description

OpenSSH software included with PAN-OS has been upgraded to resolve multiple vulnerabilities. These issue affects Palo Alto Networks PAN-OS 7.1 versions before 7.1.26; 8.1 versions before 8.1.13; 9.0 versions before 9.0.7. PAN-OS 8.0 is now end-of-life as of October 31, 2019, and is no longer covered by our Product Security Assurance policies.

🎯 Affected products1

PAN-OS

✅ Remediation

These issues are fixed in PAN-OS 7.1.26 (pending release), PAN-OS 8.1.13, PAN-OS 9.0.7 and all later versions. Workarounds and mitigations: This issue affects the management interface of PAN-OS and is mitigated by following best practices for securing the PAN-OS management interface. Our best practices guidelines reduce the exposure of the management interface to potential attackers. Please review the Best Practices for Securing Administrative Access in the PAN-OS 8.1 technical documentation, available at: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/getting-started/best-practices-for-securing-administrative-access.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/PAN-SA-2020-0002