All vulnerabilities
CVE-2020-2021

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Palo Alto Networks PAN-OSNetwork & edge
Open in ThreatlineRecord JSON
CVSS
10.0Critical
ExploitationExploited in the wildAdded to KEV 25 Mar 2022. Known ransomware useCISA KEV
Exploit odds (EPSS)4.36%Chance of exploitation activity in the next 30 days, higher than 91% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in8.1.15Also 9.0.9, 9.1.3CVE List
Federal deadline15 Apr 2022Remediation due date for US federal agenciesCISA KEV
CISA required actionApply updates per vendor instructions. CISA KEV

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 29 Jun 2020, 15:10 UTCPublishedCVE List
  2. 25 Mar 2022Added to CISA KEVCISA KEV

Description

Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication.

Text from CVE List

Affected versions 5

  • PAN-OSunaffected: 7.1.*CVE List
  • PAN-OSaffected: 8.0.*CVE List
  • PAN-OSaffected: 8.1 before 8.1.15CVE List
  • PAN-OSaffected: 9.0 before 9.0.9CVE List
  • PAN-OSaffected: 9.1 before 9.1.3CVE List

References 3