CVE-2020-2004 GlobalProtect App: Passwords may be logged in clear text while collecting troubleshooting logs

Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are collected for troubleshooting on GlobalProtect app also known as GlobalProtect Agent for MacOS and Windows. For this issue to occur all of these conditions must be true: 1 'Sav...

CVE-2020-2004

The CVE-2020-2004 entry affects Palo Alto Networks GlobalProtect App prior to 5.0.9 (and 5.1 prior to 5.1.2 on Windows/macOS). The root cause is that, under specific conditions, a user’s password can be logged in cleartext in PanGPS.log when troubleshooting logs are collected (Save User Credentia...

CVE-2020-2004: DEPRECATED: Information Exposure Through Debug Log Files

Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are collected for troubleshooting on GlobalProtect app also known as GlobalProtect Agent for MacOS and Windows. For this issue to occur all of these conditions must be true: 1 'Sav...