CVE-2020-1998

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource access for the user. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.0 versions earlier than 9.0.6; PAN-OS 9.1 versions earlier than 9.1.1; All versions of PAN-OS 8.0.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-285 CWE-863

Affected software

No affected versions have been published.

Timeline

Published: May 13, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-19995.3A vulnerability exists in the Palo Alto Network PAN-OS signature-based threat detection engine that allows an attacker to communicate with d CVE-2020-20007.2An OS command injection and memory corruption vulnerability in the PAN-OS management web interface that allows authenticated administrators CVE-2020-20019.8An external control of path and data vulnerability in the Palo Alto Networks PAN-OS Panorama XSLT processing logic that allows an unauthenti CVE-2020-200129.8WebPlus Pro v1.4.7.8.4-01 is vulnerable to Incorrect Access Control.CVE-2020-20028.1An authentication bypass by spoofing vulnerability exists in the authentication daemon and User-ID components of Palo Alto Networks PAN-OS b CVE-2020-200217.5An issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of service via misconfiguration in the SSH daemon CVE-2020-20036.5An external control of filename vulnerability in the command processing of PAN-OS allows an authenticated administrator to delete arbitrary CVE-2020-20045.5Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are collected for troub CVE-2020-20056.1A cross-site scripting (XSS) vulnerability exists when visiting malicious websites with the Palo Alto Networks GlobalProtect Clientless VPN CVE-2020-20068.8A stack-based buffer overflow vulnerability in the management server component of PAN-OS that allows an authenticated user to potentially ex CVE-2020-200678.8File upload vulnerability in ebCMS v.1.1.0 allows a remote attacker to execute arbitrary code via the upload type parameter.CVE-2020-20077.2An OS command injection vulnerability in the management server component of PAN-OS allows an authenticated user to potentially execute arbit