CVE-2020-1981

Published: Mar 11, 2020Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shell to execute commands as a low privileged user and gain root access on the PAN-OS hardware or virtual appliance. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions.

Affected (1)

Products: Paloaltonetworks: Pan Os

Paloaltonetworks

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 8.1.0 to 8.1.13

Related CWEs

Insecure Temporary File

Creating and using insecure temporary files can leave application and system data vulnerable to attack.

Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

References (2)

https://security.paloaltonetworks.com/CVE-2020-1981

Source: psirt@paloaltonetworks.com

Issue TrackingVendor Advisory

https://security.paloaltonetworks.com/CVE-2020-1981

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

Timeline

No history available yet.