CVE-2020-1988
Last modified
CVE-2020-1988 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the root of the OS disk (C:\) or to Program Files directory to gain system privileges. This issue affects Palo Alto Networks GlobalProtect Agent 5.0 versions before 5.0.5; 4.1 versions before 4.1.13 on Windows;. EPSS estimates a 0.35% chance of exploitation in the next 30 days.
Description
An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the root of the OS disk (C:\) or to Program Files directory to gain system privileges. This issue affects Palo Alto Networks GlobalProtect Agent 5.0 versions before 5.0.5; 4.1 versions before 4.1.13 on Windows;
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Paloaltonetworks | Globalprotect | >= 4.1.0, < 4.1.13 |
| Paloaltonetworks | Globalprotect | >= 5.0.0, < 5.0.5 |
References
- https://security.paloaltonetworks.com/CVE-2020-1988Vendor Advisory
- https://security.paloaltonetworks.com/CVE-2020-1988Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-1988?
How severe is CVE-2020-1988?
How do I fix CVE-2020-1988?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-19860When ldns version 1.7.1 verifies a zone file, the ldns_rr_ne…6.5
- CVE-2020-19861When a zone file in ldns 1.7.1 is parsed, the function ldns_…7.5
- CVE-2020-1987An information exposure vulnerability in the logging compone…3.3
- CVE-2020-19877DBHcms v1.2.0 has a directory traversal vulnerability as the…5.3
- CVE-2020-19878DBHcms v1.2.0 has a sensitive information leaks vulnerabilit…7.5
- CVE-2020-19879DBHcms v1.2.0 has a stored xss vulnerability as there is no …6.1
- CVE-2020-19880DBHcms v1.2.0 has a stored xss vulnerability as there is no …6.1
- CVE-2020-19881DBHcms v1.2.0 has a reflected xss vulnerability as there is …4.8
- CVE-2020-19882DBHcms v1.2.0 has a stored xss vulnerability as there is no …4.8
- CVE-2020-19883DBHcms v1.2.0 has a stored xss vulnerability as there is no …4.8
- CVE-2020-19884DBHcms v1.2.0 has a stored xss vulnerability as there is no …4.8
- CVE-2020-19885DBHcms v1.2.0 has a stored xss vulnerability as there is no …4.8
Are you affected by CVE-2020-1988?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST