CVE-2020-1991CWE-377

Traps: Insecure temporary file vulnerability may allow privilege escalation on Windows

High · published April 8, 2020

CVSS v3.1
7.8
EPSS
0%
Percentile
19.1
In the wild
Unconfirmed
What it is

An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks Traps 5.0 versions before 5.0.8; 6.1 versions before 6.1.4 on Windows. This issue does not affect Cortex XDR 7.0. This issue does not affect Traps for Linux or MacOS.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00277 · 19.1th percentile
Weakness
CWE-377 · Insecure Temporary File
Published
2020-04-08T18:41Z
EPSS history
Timeline
  • 08 APR 18:41Z
    Traps: Insecure temporary file vulnerability may allow privilege escalation on Windows
    cvelistv5