VulnCheck KEV: CVE-2020-2021

Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication...

CVE-2020-2021

creationtimestamp| type| source ---|---|--- 2020-06-29 18:16:29+00:00| seen| https://t.me/avdno/790 2020-06-29 21:35:28+00:00| seen| https://t.me/cKure/1047 2020-06-30 06:03:40+00:00| exploited| https://t.me/cKure/1050 2020-06-30 11:25:12+00:00| seen| https://t.me/truesecator/712 2020-06-30...

Exploit for Improper Verification of Cryptographic Signature in Paloaltonetworks Pan-Os

CVE-2020-2021 CVE-2...

CVE-2020-2021

CVE-2020-2021 (PAN-OS SAML authentication bypass) : Affects PAN-OS where SAML is enabled and the Identity Provider certificate validation is disabled. The root cause is improper verification of SAML signatures, enabling an unauthenticated, network-accessible attacker to access protected resources...

Palo Alto Networks PAN-OS 8.0.x < 8.1.15 / 8.1.x < 8.1.15 / 9.0.x < 9.0.9 / 9.1.x < 9.1.3 Authentication Bypass in SAML Authentication (CVE-2020-2021)

The version of Palo Alto Networks PAN-OS running on the remote host is 8.0.x prior to 8.1.15 or 8.1.x prior to 8.1.15 or 9.0.x prior to 9.0.9 or 9.1.x prior to 9.1.3. It is, therefore, affected by a SAML authentication bypass vulnerability. Note that Nessus has not tested for this issue but has...