Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2020-1991

Traps: Insecure temporary file vulnerability may allow privilege escalation on Windows

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks Traps 5.0 versions before 5.0.8; 6.1 versions before 6.1.4 on Windows. This issue does not affect Cortex XDR 7.0. This issue does not affect Traps for Linux or MacOS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Traps

  • 5.0 to < 5.0.8affected
  • 6.1 to < 6.1.4affected

Palo Alto Networks Cortex XDR

  • 7.0.*unaffected

References