Vulnerability Details CVE-2020-1989
An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for Linux 5.0 versions before 5.0.8; 5.1 versions before 5.1.1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.5%
CVSS Severity
CVSS v3 Score 7.0
CVSS v2 Score 7.2
References
Products affected by CVE-2020-1989
-
cpe:2.3:a:paloaltonetworks:globalprotect:5.0
-
cpe:2.3:a:paloaltonetworks:globalprotect:5.0.4
-
cpe:2.3:a:paloaltonetworks:globalprotect:5.1