CVE-2020-1997CWE-601

PAN-OS: GlobalProtect registration open redirect

Medium · published May 13, 2020

CVSS v3.1
5.3
EPSS
1%
Percentile
59.6
In the wild
Unconfirmed
What it is

An open redirection vulnerability in the GlobalProtect component of Palo Alto Networks PAN-OS allows an attacker to specify an arbitrary redirection target away from the trusted GlobalProtect gateway. If the user then successfully authenticates it will cause them to access an unexpected and potentially malicious website. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.0 versions earlier than 8.0.14.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00916 · 59.6th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2020-05-13T19:07Z
EPSS history
Timeline
  • 13 MAY 19:07Z
    PAN-OS: GlobalProtect registration open redirect
    cvelistv5