CVE-2020-1987: Global Protect Agent: VPN cookie local information disclosure
An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Networks Global Protect Agent 5.0 versions prior to 5.0.9; 5.1 versions prior to 5.1.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Palo Alto Networks Global Protect Agentto a version that resolves this vulnerability.Fixed in 5.0.9 - Upgrade
Upgrade
Palo Alto Networks Global Protect Agentto a version that resolves this vulnerability.Fixed in 5.1.1
Event History
Frequently Asked Questions
What is CVE-2020-1987?
CVE-2020-1987 is an information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent that allows a local authenticated user to read VPN cookie information.
How does CVE-2020-1987 affect Palo Alto Networks Global Protect Agent?
CVE-2020-1987 affects Palo Alto Networks Global Protect Agent 5.0 versions up to 5.0.9 and 5.1 versions up to 5.1.1.
What is the severity of CVE-2020-1987?
CVE-2020-1987 has a severity score of 3.3, which is classified as low.
How can a local authenticated user exploit CVE-2020-1987?
A local authenticated user can exploit CVE-2020-1987 by setting the troubleshooting logging level to "Dump" and reading VPN cookie information.
Is there a fix available for CVE-2020-1987?
Yes, Palo Alto Networks has released patches to fix CVE-2020-1987. Users should update to the latest version of Palo Alto Networks Global Protect Agent.