CVE-2020-1987CWE-200

Global Protect Agent: VPN cookie local information disclosure

Low · published April 8, 2020

CVSS v3.1
3.9
EPSS
0%
Percentile
21.7
In the wild
Unconfirmed
What it is

An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Networks Global Protect Agent 5.0 versions prior to 5.0.9; 5.1 versions prior to 5.1.1.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00301 · 21.7th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2020-04-08T18:41Z
EPSS history
Timeline
  • 08 APR 18:41Z
    Global Protect Agent: VPN cookie local information disclosure
    cvelistv5