CVE-2020-2022

An information exposure vulnerability exists in Palo Alto Networks Panorama software that discloses the token for the Panorama web interface administrator's session to a managed device when the Panorama administrator performs a context switch into that device. This vulnerability allows an attacker to gain privileged access to the Panorama web interface. An attacker requires some knowledge of managed firewalls to exploit this issue. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.17; PAN-OS 9.0 versions earlier than PAN-OS 9.0.11; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5.

• CWE-200
• CWE-269

• https://security.paloaltonetworks.com/CVE-2020-2022Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2020-2022Vendor Advisory

Published

Nov 12, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-20214Mikrotik RouterOs 6.44.6 (long-term tree) suffers from an as…6.5
• CVE-2020-20215Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a mem…6.5
• CVE-2020-20216Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a mem…6.5
• CVE-2020-20217Mikrotik RouterOs before 6.47 (stable tree) suffers from an …6.5
• CVE-2020-20218Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a mem…6.5
• CVE-2020-20219Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a mem…6.5
• CVE-2020-20220Mikrotik RouterOs prior to stable 6.47 suffers from a memory…6.5
• CVE-2020-20221Mikrotik RouterOs before 6.44.6 (long-term tree) suffers fro…6.5
• CVE-2020-20222Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a mem…6.5
• CVE-2020-20225Mikrotik RouterOs before 6.47 (stable tree) suffers from an …6.5
• CVE-2020-20227Mikrotik RouterOs stable 6.47 suffers from a memory corrupti…6.5
• CVE-2020-2023Kata Containers doesn't restrict containers from accessing t…6.3