CVE-2020-1982

Certain communication between PAN-OS and cloud-delivered services inadvertently use TLS 1.0, which is known to be a cryptographically weak protocol. These cloud services include Cortex Data Lake, the Customer Support Portal, and the Prisma Access infrastructure. Conditions required for exploitation of known TLS 1.0 weaknesses do not exist for the communication between PAN-OS and cloud-delivered services. We do not believe that any communication is impacted as a result of known attacks against TLS 1.0. This issue impacts: All versions of PAN-OS 8.0; PAN-OS 8.1 versions earlier than PAN-OS 8.1.14; PAN-OS 9.0 versions earlier than PAN-OS 9.0.9; PAN-OS 9.1 versions earlier than PAN-OS 9.1.3. PAN-OS 7.1 is not impacted by this issue.

• CWE-326
• CWE-326

• https://security.paloaltonetworks.com/CVE-2020-1982Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2020-1982Vendor Advisory

Published

Jul 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-19786File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in…8.8
• CVE-2020-1979A format string vulnerability in the PAN-OS log daemon (logd…7.8
• CVE-2020-1980A shell command injection vulnerability in the PAN-OS CLI al…7.8
• CVE-2020-19802File Upload vulnerability found in Milken DoyoCMS v.2.3 allo…9.8
• CVE-2020-19803Cross Site Request Forgery vulnerability found in Milken Doy…8.8
• CVE-2020-1981A predictable temporary filename vulnerability in PAN-OS all…7.8
• CVE-2020-19821A SQL injection vulnerability in admin.php of DOYOCMS 2.3 al…8.8
• CVE-2020-19822A remote code execution (RCE) vulnerability in template_user…7.2
• CVE-2020-19824An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to …7
• CVE-2020-19825Cross Site Scripting (XSS) vulnerability in kevinpapst kimai…9.6
• CVE-2020-1983A use after free vulnerability in ip_reass() in ip_input.c o…6.5
• CVE-2020-1984Secdo tries to execute a script at a hardcoded path if prese…7.8