The vulnerability of the Security Assertion Markup Language (SAML) implementation in the PAN-OS operating system allows a perpetrator to increase their privileges.

🗓️ 11 Aug 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 9 Views

Privilege escalation from Security Assertion Language signature check on Palo Alto Networks.

Reporter	Title	Published	Views	Family All 25
GithubExploit	Exploit for Improper Verification of Cryptographic Signature in Paloaltonetworks Pan-Os	29 Jun 202016:56	–	githubexploit
ICS	APT Actors Chaining Vulnerabilities Against SLTT, Critical Infrastructure, and Elections Organizations	24 Oct 202012:00	–	ics
ATTACKERKB	CVE-2020-2034 — PAN-OS: OS command injection vulnerability in GlobalProtect portal	8 Jul 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-1472 aka Zerologon	17 Aug 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-2021 PAN-OS: Authentication Bypass in SAML Authentication	29 Jun 202000:00	–	attackerkb
Circl	CVE-2020-2021	29 Jun 202018:16	–	circl
CISA KEV Catalog	Palo Alto Networks PAN-OS Authentication Bypass Vulnerability	25 Mar 202200:00	–	cisa_kev
CISA	Palo Alto Releases Security Updates for PAN-OS	29 Jun 202000:00	–	cisa
CNVD	Palo Alto Networks PAN-OS Data Forgery Issue Vulnerability	30 Jun 202000:00	–	cnvd
CVE	CVE-2020-2021	29 Jun 202015:10	–	cve

Vulners

Node

OR

palo_alto_networks pan-osRange8.0.0–8.0.20

palo_alto_networks pan-osRange8.1.0–8.1.15

palo_alto_networks pan-osRange9.0.0–9.0.9

palo_alto_networks pan-osRange9.1.0–9.1.3

Source	Link
security	www.security.paloaltonetworks.com/CVE-2020-2021
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-2021
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

24 Sep 2024 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 210

CVSS 310

EPSS0.04362

Security Assertion Language signature check Palo Alto Networks remote access identity provider certificate