What is CVE-2020-2048?

CVE-2020-2048 is a vulnerability that allows an attacker to view the password for the configured system proxy server in cleartext.

What is the severity of CVE-2020-2048?

CVE-2020-2048 has a severity value of 3.3, which is considered low.

Which versions of PAN-OS are affected by CVE-2020-2048?

PAN-OS 8.1 versions earlier than 8.1.17, PAN-OS 9.0 versions earlier than 9.0.11, and PAN-OS 9.1 versions earlier than 9.1.2 are affected by CVE-2020-2048.

How can an attacker exploit CVE-2020-2048?

An attacker can exploit CVE-2020-2048 by using the CLI in Palo Alto Networks PAN-OS software to view the password for the configured system proxy server.

Is there a fix available for CVE-2020-2048?

Yes, Palo Alto Networks has released PAN-OS versions 8.1.17, 9.0.11, and 9.1.2 to address the vulnerability CVE-2020-2048.

Vulnerability/
CVE-2020-2048

low

3.3

CWE

532

12/11/2020

17/9/2024

CVE-2020-2048: PAN-OS: System proxy passwords may be logged in clear text while viewing system state

First published: Thu Nov 12 2020(Updated: )

An information exposure through log file vulnerability exists where the password for the configured system proxy server for a PAN-OS appliance may be displayed in cleartext when using the CLI in Palo Alto Networks PAN-OS software. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.17; PAN-OS 9.0 versions earlier than PAN-OS 9.0.11; PAN-OS 9.1 versions earlier than PAN-OS 9.1.2.

Credit: psirt@paloaltonetworks.com

Affected Software	Affected Version	How to fix
Paloaltonetworks Pan-os	>=8.1.0<8.1.17
Paloaltonetworks Pan-os	>=9.0.0<9.0.11
Paloaltonetworks Pan-os	>=9.1.0<9.1.2

Remedy

This issue is fixed in PAN-OS 8.1.17, PAN-OS 9.0.11, PAN-OS 9.1.2, and all later PAN-OS versions.

Never miss a vulnerability like this again

Reference Links

https://security.paloaltonetworks.com/CVE-2020-2048

Frequently Asked Questions

What is CVE-2020-2048?
CVE-2020-2048 is a vulnerability that allows an attacker to view the password for the configured system proxy server in cleartext.
What is the severity of CVE-2020-2048?
CVE-2020-2048 has a severity value of 3.3, which is considered low.
Which versions of PAN-OS are affected by CVE-2020-2048?
PAN-OS 8.1 versions earlier than 8.1.17, PAN-OS 9.0 versions earlier than 9.0.11, and PAN-OS 9.1 versions earlier than 9.1.2 are affected by CVE-2020-2048.
How can an attacker exploit CVE-2020-2048?
An attacker can exploit CVE-2020-2048 by using the CLI in Palo Alto Networks PAN-OS software to view the password for the configured system proxy server.
Is there a fix available for CVE-2020-2048?
Yes, Palo Alto Networks has released PAN-OS versions 8.1.17, 9.0.11, and 9.1.2 to address the vulnerability CVE-2020-2048.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/author
agent/last-modified-date
agent/remedy
agent/references
agent/weakness
agent/severity
agent/title
agent/tags
agent/first-publish-date
agent/event
agent/description
vendor/paloaltonetworks
canonical/paloaltonetworks pan-os
version/paloaltonetworks pan-os/8.1.0
version/paloaltonetworks pan-os/9.0.0
version/paloaltonetworks pan-os/9.1.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.