cvelistv5 - cve-2020-2050

cve-2020-2050

Vulnerability from cvelistv5

Published

2020-11-12 00:05

Modified

2024-09-17 00:11

Severity ?

8.2 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Summary

An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to restricted VPN network resources when the gateway or portal is configured to rely entirely on certificate-based authentication. Impacted features that use SSL VPN with client certificate verification are: GlobalProtect Gateway, GlobalProtect Portal, GlobalProtect Clientless VPN In configurations where client certificate verification is used in conjunction with other authentication methods, the protections added by the certificate check are ignored as a result of this issue. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.17; PAN-OS 9.0 versions earlier than PAN-OS 9.0.11; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.

References

▼	URL	Tags
	psirt@paloaltonetworks.com	https://security.paloaltonetworks.com/CVE-2020-2050	Vendor Advisory
	af854a3a-2127-422b-91ae-364da2661108	https://security.paloaltonetworks.com/CVE-2020-2050	Vendor Advisory

Impacted products

	Vendor	Product	Version
	Palo Alto Networks	PAN-OS	Version: 8.1 < 8.1.17 Version: 9.0 < 9.0.11 Version: 9.1 < 9.1.5 Version: 10.0 < 10.0.1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T06:54:00.576Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://security.paloaltonetworks.com/CVE-2020-2050",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "PAN-OS",
               vendor: "Palo Alto Networks",
               versions: [
                  {
                     changes: [
                        {
                           at: "8.1.17",
                           status: "unaffected",
                        },
                     ],
                     lessThan: "8.1.17",
                     status: "affected",
                     version: "8.1",
                     versionType: "custom",
                  },
                  {
                     changes: [
                        {
                           at: "9.0.11",
                           status: "unaffected",
                        },
                     ],
                     lessThan: "9.0.11",
                     status: "affected",
                     version: "9.0",
                     versionType: "custom",
                  },
                  {
                     changes: [
                        {
                           at: "9.1.5",
                           status: "unaffected",
                        },
                     ],
                     lessThan: "9.1.5",
                     status: "affected",
                     version: "9.1",
                     versionType: "custom",
                  },
                  {
                     changes: [
                        {
                           at: "10.0.1",
                           status: "unaffected",
                        },
                     ],
                     lessThan: "10.0.1",
                     status: "affected",
                     version: "10.0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               value: "This issue is only applicable to PAN-OS appliances using the GlobalProtect SSL VPN gateway or portal configured to allow users to authenticate with client certificate authentication.\n\nThis issue can not be exploited if client certificate authentication is not in use.\n\nOther forms of authentication are not impacted by this issue.",
            },
         ],
         credits: [
            {
               lang: "en",
               value: "This issue was found by Nicholas Newsom of Palo Alto Networks during internal security review.",
            },
         ],
         datePublic: "2020-11-11T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to restricted VPN network resources when the gateway or portal is configured to rely entirely on certificate-based authentication. Impacted features that use SSL VPN with client certificate verification are: GlobalProtect Gateway, GlobalProtect Portal, GlobalProtect Clientless VPN In configurations where client certificate verification is used in conjunction with other authentication methods, the protections added by the certificate check are ignored as a result of this issue. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.17; PAN-OS 9.0 versions earlier than PAN-OS 9.0.11; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.",
            },
         ],
         exploits: [
            {
               lang: "en",
               value: "Palo Alto Networks is not aware of any malicious exploitation of this issue.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 8.2,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-285",
                     description: "CWE-285 Improper Authorization",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-11-12T00:05:22",
            orgId: "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
            shortName: "palo_alto",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://security.paloaltonetworks.com/CVE-2020-2050",
            },
         ],
         solutions: [
            {
               lang: "en",
               value: "This issue is fixed in PAN-OS 8.1.17, PAN-OS 9.0.11, PAN-OS 9.1.5, PAN-OS 10.0.1, and all later PAN-OS versions.",
            },
         ],
         source: {
            defect: [
               "PAN-146650",
            ],
            discovery: "INTERNAL",
         },
         timeline: [
            {
               lang: "en",
               time: "2020-11-11T00:00:00",
               value: "Initial publication",
            },
         ],
         title: "PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verification",
         workarounds: [
            {
               lang: "en",
               value: "This issue can be mitigated by configuring GlobalProtect SSL VPN to require gateway and portal users to authenticate with their credentials. Other authentication methods are not impacted by this issue.",
            },
         ],
         x_generator: {
            engine: "Vulnogram 0.0.9",
         },
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "psirt@paloaltonetworks.com",
               DATE_PUBLIC: "2020-11-11T17:00:00.000Z",
               ID: "CVE-2020-2050",
               STATE: "PUBLIC",
               TITLE: "PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verification",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "PAN-OS",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_name: "8.1",
                                          version_value: "8.1.17",
                                       },
                                       {
                                          version_affected: "<",
                                          version_name: "9.0",
                                          version_value: "9.0.11",
                                       },
                                       {
                                          version_affected: "<",
                                          version_name: "9.1",
                                          version_value: "9.1.5",
                                       },
                                       {
                                          version_affected: "<",
                                          version_name: "10.0",
                                          version_value: "10.0.1",
                                       },
                                       {
                                          version_affected: "!>=",
                                          version_name: "8.1",
                                          version_value: "8.1.17",
                                       },
                                       {
                                          version_affected: "!>=",
                                          version_name: "9.0",
                                          version_value: "9.0.11",
                                       },
                                       {
                                          version_affected: "!>=",
                                          version_name: "9.1",
                                          version_value: "9.1.5",
                                       },
                                       {
                                          version_affected: "!>=",
                                          version_name: "10.0",
                                          version_value: "10.0.1",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Palo Alto Networks",
                     },
                  ],
               },
            },
            configuration: [
               {
                  lang: "en",
                  value: "This issue is only applicable to PAN-OS appliances using the GlobalProtect SSL VPN gateway or portal configured to allow users to authenticate with client certificate authentication.\n\nThis issue can not be exploited if client certificate authentication is not in use.\n\nOther forms of authentication are not impacted by this issue.",
               },
            ],
            credit: [
               {
                  lang: "eng",
                  value: "This issue was found by Nicholas Newsom of Palo Alto Networks during internal security review.",
               },
            ],
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to restricted VPN network resources when the gateway or portal is configured to rely entirely on certificate-based authentication. Impacted features that use SSL VPN with client certificate verification are: GlobalProtect Gateway, GlobalProtect Portal, GlobalProtect Clientless VPN In configurations where client certificate verification is used in conjunction with other authentication methods, the protections added by the certificate check are ignored as a result of this issue. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.17; PAN-OS 9.0 versions earlier than PAN-OS 9.0.11; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.",
                  },
               ],
            },
            exploit: [
               {
                  lang: "en",
                  value: "Palo Alto Networks is not aware of any malicious exploitation of this issue.",
               },
            ],
            generator: {
               engine: "Vulnogram 0.0.9",
            },
            impact: {
               cvss: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 8.2,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
                  version: "3.1",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-285 Improper Authorization",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://security.paloaltonetworks.com/CVE-2020-2050",
                     refsource: "MISC",
                     url: "https://security.paloaltonetworks.com/CVE-2020-2050",
                  },
               ],
            },
            solution: [
               {
                  lang: "en",
                  value: "This issue is fixed in PAN-OS 8.1.17, PAN-OS 9.0.11, PAN-OS 9.1.5, PAN-OS 10.0.1, and all later PAN-OS versions.",
               },
            ],
            source: {
               defect: [
                  "PAN-146650",
               ],
               discovery: "INTERNAL",
            },
            timeline: [
               {
                  lang: "en",
                  time: "2020-11-11T00:00:00",
                  value: "Initial publication",
               },
            ],
            work_around: [
               {
                  lang: "en",
                  value: "This issue can be mitigated by configuring GlobalProtect SSL VPN to require gateway and portal users to authenticate with their credentials. Other authentication methods are not impacted by this issue.",
               },
            ],
            x_advisoryEoL: false,
            x_affectedList: [
               "PAN-OS 10.0.0",
               "PAN-OS 10.0",
               "PAN-OS 9.1.4",
               "PAN-OS 9.1.3-h1",
               "PAN-OS 9.1.3",
               "PAN-OS 9.1.2-h1",
               "PAN-OS 9.1.2",
               "PAN-OS 9.1.1",
               "PAN-OS 9.1.0-h3",
               "PAN-OS 9.1.0-h2",
               "PAN-OS 9.1.0-h1",
               "PAN-OS 9.1.0",
               "PAN-OS 9.1",
               "PAN-OS 9.0.10",
               "PAN-OS 9.0.9-h1",
               "PAN-OS 9.0.9",
               "PAN-OS 9.0.8",
               "PAN-OS 9.0.7",
               "PAN-OS 9.0.6",
               "PAN-OS 9.0.5",
               "PAN-OS 9.0.4",
               "PAN-OS 9.0.3-h3",
               "PAN-OS 9.0.3-h2",
               "PAN-OS 9.0.3-h1",
               "PAN-OS 9.0.3",
               "PAN-OS 9.0.2-h4",
               "PAN-OS 9.0.2-h3",
               "PAN-OS 9.0.2-h2",
               "PAN-OS 9.0.2-h1",
               "PAN-OS 9.0.2",
               "PAN-OS 9.0.1",
               "PAN-OS 9.0.0",
               "PAN-OS 9.0",
               "PAN-OS 8.1.16",
               "PAN-OS 8.1.15-h3",
               "PAN-OS 8.1.15-h2",
               "PAN-OS 8.1.15-h1",
               "PAN-OS 8.1.15",
               "PAN-OS 8.1.14-h2",
               "PAN-OS 8.1.14-h1",
               "PAN-OS 8.1.14",
               "PAN-OS 8.1.13",
               "PAN-OS 8.1.12",
               "PAN-OS 8.1.11",
               "PAN-OS 8.1.10",
               "PAN-OS 8.1.9-h4",
               "PAN-OS 8.1.9-h3",
               "PAN-OS 8.1.9-h2",
               "PAN-OS 8.1.9-h1",
               "PAN-OS 8.1.9",
               "PAN-OS 8.1.8-h5",
               "PAN-OS 8.1.8-h4",
               "PAN-OS 8.1.8-h3",
               "PAN-OS 8.1.8-h2",
               "PAN-OS 8.1.8-h1",
               "PAN-OS 8.1.8",
               "PAN-OS 8.1.7",
               "PAN-OS 8.1.6-h2",
               "PAN-OS 8.1.6-h1",
               "PAN-OS 8.1.6",
               "PAN-OS 8.1.5",
               "PAN-OS 8.1.4",
               "PAN-OS 8.1.3",
               "PAN-OS 8.1.2",
               "PAN-OS 8.1.1",
               "PAN-OS 8.1.0",
               "PAN-OS 8.1",
            ],
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
      assignerShortName: "palo_alto",
      cveId: "CVE-2020-2050",
      datePublished: "2020-11-12T00:05:22.986621Z",
      dateReserved: "2019-12-04T00:00:00",
      dateUpdated: "2024-09-17T00:11:04.982Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
   "vulnerability-lookup:meta": {
      nvd: "{\"cve\":{\"id\":\"CVE-2020-2050\",\"sourceIdentifier\":\"psirt@paloaltonetworks.com\",\"published\":\"2020-11-12T00:15:10.677\",\"lastModified\":\"2024-11-21T05:24:33.270\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to restricted VPN network resources when the gateway or portal is configured to rely entirely on certificate-based authentication. Impacted features that use SSL VPN with client certificate verification are: GlobalProtect Gateway, GlobalProtect Portal, GlobalProtect Clientless VPN In configurations where client certificate verification is used in conjunction with other authentication methods, the protections added by the certificate check are ignored as a result of this issue. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.17; PAN-OS 9.0 versions earlier than PAN-OS 9.0.11; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.\"},{\"lang\":\"es\",\"value\":\"Se presenta una vulnerabilidad de omisión de autenticación en el componente GlobalProtect SSL VPN del software PAN-OS de Palo Alto Networks, que permite a un atacante omitir todas las comprobaciones de certificados de clientes con un certificado no válido.&#xa0;Un atacante remoto puede autenticarse con éxito como cualquier usuario y conseguir acceso a los recursos de red VPN restringidos cuando la puerta de enlace o el portal están configurados para depender completamente de la autenticación basada en certificados.&#xa0;Las características afectadas que usan SSL VPN con verificación de certificado de cliente son: GlobalProtect Gateway, GlobalProtect Portal, GlobalProtect Clientless VPN. En configuraciones donde la verificación de certificado de cliente es usada en conjunto con otros métodos de autenticación, las protecciones agregadas por la verificación de certificado son ignoradas como resultado de este problema.&#xa0;Este problema afecta: versiones PAN-OS 8.1 anteriores a PAN-OS 8.1.17;&#xa0;versiones PAN-OS 9.0 anteriores a PAN-OS 9.0.11;&#xa0;versiones PAN-OS 9.1 anteriores a PAN-OS 9.1.5;&#xa0;versiones PAN-OS 10.0 anteriores a PAN-OS 10.0.1\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@paloaltonetworks.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":4.2},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":4.2}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:N\",\"baseScore\":6.4,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"psirt@paloaltonetworks.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-285\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-287\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.1.0\",\"versionEndExcluding\":\"8.1.17\",\"matchCriteriaId\":\"6A42777F-938A-45FB-BCD3-9F1BEDF7DB02\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"9.0.0\",\"versionEndExcluding\":\"9.0.11\",\"matchCriteriaId\":\"5CE2A954-DB66-48F8-96D7-86846D1FE5D8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"9.1.0\",\"versionEndExcluding\":\"9.1.5\",\"matchCriteriaId\":\"872E6056-5BE6-4FE8-BE33-F98CF0DBC67C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.0.0\",\"versionEndExcluding\":\"10.0.1\",\"matchCriteriaId\":\"09926771-7377-487B-B660-809265E7D8A2\"}]}]}],\"references\":[{\"url\":\"https://security.paloaltonetworks.com/CVE-2020-2050\",\"source\":\"psirt@paloaltonetworks.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security.paloaltonetworks.com/CVE-2020-2050\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
   },
}

fkie_cve-2020-2050

Vulnerability from fkie_nvd

Published

2020-11-12 00:15

Modified

2024-11-21 05:24

Severity ?

8.2 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
8.2 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Summary

References

▼	URL	Tags
	psirt@paloaltonetworks.com	https://security.paloaltonetworks.com/CVE-2020-2050	Vendor Advisory
	af854a3a-2127-422b-91ae-364da2661108	https://security.paloaltonetworks.com/CVE-2020-2050	Vendor Advisory

Impacted products

Vendor	Product	Version
paloaltonetworks	pan-os	*
paloaltonetworks	pan-os	*
paloaltonetworks	pan-os	*
paloaltonetworks	pan-os	*

JSON

To clipboard

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "6A42777F-938A-45FB-BCD3-9F1BEDF7DB02",
                     versionEndExcluding: "8.1.17",
                     versionStartIncluding: "8.1.0",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "5CE2A954-DB66-48F8-96D7-86846D1FE5D8",
                     versionEndExcluding: "9.0.11",
                     versionStartIncluding: "9.0.0",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "872E6056-5BE6-4FE8-BE33-F98CF0DBC67C",
                     versionEndExcluding: "9.1.5",
                     versionStartIncluding: "9.1.0",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "09926771-7377-487B-B660-809265E7D8A2",
                     versionEndExcluding: "10.0.1",
                     versionStartIncluding: "10.0.0",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to restricted VPN network resources when the gateway or portal is configured to rely entirely on certificate-based authentication. Impacted features that use SSL VPN with client certificate verification are: GlobalProtect Gateway, GlobalProtect Portal, GlobalProtect Clientless VPN In configurations where client certificate verification is used in conjunction with other authentication methods, the protections added by the certificate check are ignored as a result of this issue. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.17; PAN-OS 9.0 versions earlier than PAN-OS 9.0.11; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.",
      },
      {
         lang: "es",
         value: "Se presenta una vulnerabilidad de omisión de autenticación en el componente GlobalProtect SSL VPN del software PAN-OS de Palo Alto Networks, que permite a un atacante omitir todas las comprobaciones de certificados de clientes con un certificado no válido.&#xa0;Un atacante remoto puede autenticarse con éxito como cualquier usuario y conseguir acceso a los recursos de red VPN restringidos cuando la puerta de enlace o el portal están configurados para depender completamente de la autenticación basada en certificados.&#xa0;Las características afectadas que usan SSL VPN con verificación de certificado de cliente son: GlobalProtect Gateway, GlobalProtect Portal, GlobalProtect Clientless VPN. En configuraciones donde la verificación de certificado de cliente es usada en conjunto con otros métodos de autenticación, las protecciones agregadas por la verificación de certificado son ignoradas como resultado de este problema.&#xa0;Este problema afecta: versiones PAN-OS 8.1 anteriores a PAN-OS 8.1.17;&#xa0;versiones PAN-OS 9.0 anteriores a PAN-OS 9.0.11;&#xa0;versiones PAN-OS 9.1 anteriores a PAN-OS 9.1.5;&#xa0;versiones PAN-OS 10.0 anteriores a PAN-OS 10.0.1",
      },
   ],
   id: "CVE-2020-2050",
   lastModified: "2024-11-21T05:24:33.270",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "MEDIUM",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "NONE",
               baseScore: 6.4,
               confidentialityImpact: "PARTIAL",
               integrityImpact: "PARTIAL",
               vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:N",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 4.9,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
      cvssMetricV31: [
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "NONE",
               baseScore: 8.2,
               baseSeverity: "HIGH",
               confidentialityImpact: "HIGH",
               integrityImpact: "LOW",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
               version: "3.1",
            },
            exploitabilityScore: 3.9,
            impactScore: 4.2,
            source: "psirt@paloaltonetworks.com",
            type: "Secondary",
         },
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "NONE",
               baseScore: 8.2,
               baseSeverity: "HIGH",
               confidentialityImpact: "HIGH",
               integrityImpact: "LOW",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
               version: "3.1",
            },
            exploitabilityScore: 3.9,
            impactScore: 4.2,
            source: "nvd@nist.gov",
            type: "Primary",
         },
      ],
   },
   published: "2020-11-12T00:15:10.677",
   references: [
      {
         source: "psirt@paloaltonetworks.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "https://security.paloaltonetworks.com/CVE-2020-2050",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "https://security.paloaltonetworks.com/CVE-2020-2050",
      },
   ],
   sourceIdentifier: "psirt@paloaltonetworks.com",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-285",
            },
         ],
         source: "psirt@paloaltonetworks.com",
         type: "Secondary",
      },
      {
         description: [
            {
               lang: "en",
               value: "CWE-287",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

gsd-2020-2050

Vulnerability from gsd

Modified

2023-12-13 01:21

Details

Aliases

CVE-2020-2050

Aliases

CVE-2020-2050

JSON

To clipboard

{
   GSD: {
      alias: "CVE-2020-2050",
      description: "An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to restricted VPN network resources when the gateway or portal is configured to rely entirely on certificate-based authentication. Impacted features that use SSL VPN with client certificate verification are: GlobalProtect Gateway, GlobalProtect Portal, GlobalProtect Clientless VPN In configurations where client certificate verification is used in conjunction with other authentication methods, the protections added by the certificate check are ignored as a result of this issue. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.17; PAN-OS 9.0 versions earlier than PAN-OS 9.0.11; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.",
      id: "GSD-2020-2050",
   },
   gsd: {
      metadata: {
         exploitCode: "unknown",
         remediation: "unknown",
         reportConfidence: "confirmed",
         type: "vulnerability",
      },
      osvSchema: {
         aliases: [
            "CVE-2020-2050",
         ],
         details: "An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to restricted VPN network resources when the gateway or portal is configured to rely entirely on certificate-based authentication. Impacted features that use SSL VPN with client certificate verification are: GlobalProtect Gateway, GlobalProtect Portal, GlobalProtect Clientless VPN In configurations where client certificate verification is used in conjunction with other authentication methods, the protections added by the certificate check are ignored as a result of this issue. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.17; PAN-OS 9.0 versions earlier than PAN-OS 9.0.11; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.",
         id: "GSD-2020-2050",
         modified: "2023-12-13T01:21:50.768190Z",
         schema_version: "1.4.0",
      },
   },
   namespaces: {
      "cve.org": {
         CVE_data_meta: {
            ASSIGNER: "psirt@paloaltonetworks.com",
            DATE_PUBLIC: "2020-11-11T17:00:00.000Z",
            ID: "CVE-2020-2050",
            STATE: "PUBLIC",
            TITLE: "PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verification",
         },
         affects: {
            vendor: {
               vendor_data: [
                  {
                     product: {
                        product_data: [
                           {
                              product_name: "PAN-OS",
                              version: {
                                 version_data: [
                                    {
                                       version_affected: "<",
                                       version_name: "8.1",
                                       version_value: "8.1.17",
                                    },
                                    {
                                       version_affected: "<",
                                       version_name: "9.0",
                                       version_value: "9.0.11",
                                    },
                                    {
                                       version_affected: "<",
                                       version_name: "9.1",
                                       version_value: "9.1.5",
                                    },
                                    {
                                       version_affected: "<",
                                       version_name: "10.0",
                                       version_value: "10.0.1",
                                    },
                                    {
                                       version_affected: "!>=",
                                       version_name: "8.1",
                                       version_value: "8.1.17",
                                    },
                                    {
                                       version_affected: "!>=",
                                       version_name: "9.0",
                                       version_value: "9.0.11",
                                    },
                                    {
                                       version_affected: "!>=",
                                       version_name: "9.1",
                                       version_value: "9.1.5",
                                    },
                                    {
                                       version_affected: "!>=",
                                       version_name: "10.0",
                                       version_value: "10.0.1",
                                    },
                                 ],
                              },
                           },
                        ],
                     },
                     vendor_name: "Palo Alto Networks",
                  },
               ],
            },
         },
         configuration: [
            {
               lang: "eng",
               value: "This issue is only applicable to PAN-OS appliances using the GlobalProtect SSL VPN gateway or portal configured to allow users to authenticate with client certificate authentication.\n\nThis issue can not be exploited if client certificate authentication is not in use.\n\nOther forms of authentication are not impacted by this issue.\n",
            },
         ],
         credit: [
            {
               lang: "eng",
               value: "This issue was found by Nicholas Newsom of Palo Alto Networks during internal security review.",
            },
         ],
         data_format: "MITRE",
         data_type: "CVE",
         data_version: "4.0",
         description: {
            description_data: [
               {
                  lang: "eng",
                  value: "An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to restricted VPN network resources when the gateway or portal is configured to rely entirely on certificate-based authentication. Impacted features that use SSL VPN with client certificate verification are: GlobalProtect Gateway, GlobalProtect Portal, GlobalProtect Clientless VPN In configurations where client certificate verification is used in conjunction with other authentication methods, the protections added by the certificate check are ignored as a result of this issue. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.17; PAN-OS 9.0 versions earlier than PAN-OS 9.0.11; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.",
               },
            ],
         },
         exploit: [
            {
               lang: "eng",
               value: "Palo Alto Networks is not aware of any malicious exploitation of this issue.",
            },
         ],
         generator: {
            engine: "Vulnogram 0.0.9",
         },
         impact: {
            cvss: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "NONE",
               baseScore: 8.2,
               baseSeverity: "HIGH",
               confidentialityImpact: "HIGH",
               integrityImpact: "LOW",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
               version: "3.1",
            },
         },
         problemtype: {
            problemtype_data: [
               {
                  description: [
                     {
                        lang: "eng",
                        value: "CWE-285 Improper Authorization",
                     },
                  ],
               },
            ],
         },
         references: {
            reference_data: [
               {
                  name: "https://security.paloaltonetworks.com/CVE-2020-2050",
                  refsource: "MISC",
                  url: "https://security.paloaltonetworks.com/CVE-2020-2050",
               },
            ],
         },
         solution: [
            {
               lang: "eng",
               value: "This issue is fixed in PAN-OS 8.1.17, PAN-OS 9.0.11, PAN-OS 9.1.5, PAN-OS 10.0.1, and all later PAN-OS versions.",
            },
         ],
         source: {
            defect: [
               "PAN-146650",
            ],
            discovery: "INTERNAL",
         },
         timeline: [
            {
               lang: "eng",
               time: "2020-11-11T17:00:00.000Z",
               value: "Initial publication",
            },
         ],
         work_around: [
            {
               lang: "eng",
               value: "This issue can be mitigated by configuring GlobalProtect SSL VPN to require gateway and portal users to authenticate with their credentials. Other authentication methods are not impacted by this issue.",
            },
         ],
         x_advisoryEoL: false,
         x_affectedList: [
            "PAN-OS 10.0.0",
            "PAN-OS 10.0",
            "PAN-OS 9.1.4",
            "PAN-OS 9.1.3-h1",
            "PAN-OS 9.1.3",
            "PAN-OS 9.1.2-h1",
            "PAN-OS 9.1.2",
            "PAN-OS 9.1.1",
            "PAN-OS 9.1.0-h3",
            "PAN-OS 9.1.0-h2",
            "PAN-OS 9.1.0-h1",
            "PAN-OS 9.1.0",
            "PAN-OS 9.1",
            "PAN-OS 9.0.10",
            "PAN-OS 9.0.9-h1",
            "PAN-OS 9.0.9",
            "PAN-OS 9.0.8",
            "PAN-OS 9.0.7",
            "PAN-OS 9.0.6",
            "PAN-OS 9.0.5",
            "PAN-OS 9.0.4",
            "PAN-OS 9.0.3-h3",
            "PAN-OS 9.0.3-h2",
            "PAN-OS 9.0.3-h1",
            "PAN-OS 9.0.3",
            "PAN-OS 9.0.2-h4",
            "PAN-OS 9.0.2-h3",
            "PAN-OS 9.0.2-h2",
            "PAN-OS 9.0.2-h1",
            "PAN-OS 9.0.2",
            "PAN-OS 9.0.1",
            "PAN-OS 9.0.0",
            "PAN-OS 9.0",
            "PAN-OS 8.1.16",
            "PAN-OS 8.1.15-h3",
            "PAN-OS 8.1.15-h2",
            "PAN-OS 8.1.15-h1",
            "PAN-OS 8.1.15",
            "PAN-OS 8.1.14-h2",
            "PAN-OS 8.1.14-h1",
            "PAN-OS 8.1.14",
            "PAN-OS 8.1.13",
            "PAN-OS 8.1.12",
            "PAN-OS 8.1.11",
            "PAN-OS 8.1.10",
            "PAN-OS 8.1.9-h4",
            "PAN-OS 8.1.9-h3",
            "PAN-OS 8.1.9-h2",
            "PAN-OS 8.1.9-h1",
            "PAN-OS 8.1.9",
            "PAN-OS 8.1.8-h5",
            "PAN-OS 8.1.8-h4",
            "PAN-OS 8.1.8-h3",
            "PAN-OS 8.1.8-h2",
            "PAN-OS 8.1.8-h1",
            "PAN-OS 8.1.8",
            "PAN-OS 8.1.7",
            "PAN-OS 8.1.6-h2",
            "PAN-OS 8.1.6-h1",
            "PAN-OS 8.1.6",
            "PAN-OS 8.1.5",
            "PAN-OS 8.1.4",
            "PAN-OS 8.1.3",
            "PAN-OS 8.1.2",
            "PAN-OS 8.1.1",
            "PAN-OS 8.1.0",
            "PAN-OS 8.1",
         ],
      },
      "nvd.nist.gov": {
         configurations: {
            CVE_data_version: "4.0",
            nodes: [
               {
                  children: [],
                  cpe_match: [
                     {
                        cpe23Uri: "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
                        cpe_name: [],
                        versionEndExcluding: "8.1.17",
                        versionStartIncluding: "8.1.0",
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
                        cpe_name: [],
                        versionEndExcluding: "9.0.11",
                        versionStartIncluding: "9.0.0",
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
                        cpe_name: [],
                        versionEndExcluding: "9.1.5",
                        versionStartIncluding: "9.1.0",
                        vulnerable: true,
                     },
                     {
                        cpe23Uri: "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
                        cpe_name: [],
                        versionEndExcluding: "10.0.1",
                        versionStartIncluding: "10.0.0",
                        vulnerable: true,
                     },
                  ],
                  operator: "OR",
               },
            ],
         },
         cve: {
            CVE_data_meta: {
               ASSIGNER: "psirt@paloaltonetworks.com",
               ID: "CVE-2020-2050",
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "en",
                     value: "An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to restricted VPN network resources when the gateway or portal is configured to rely entirely on certificate-based authentication. Impacted features that use SSL VPN with client certificate verification are: GlobalProtect Gateway, GlobalProtect Portal, GlobalProtect Clientless VPN In configurations where client certificate verification is used in conjunction with other authentication methods, the protections added by the certificate check are ignored as a result of this issue. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.17; PAN-OS 9.0 versions earlier than PAN-OS 9.0.11; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "en",
                           value: "CWE-287",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "N/A",
                     refsource: "CONFIRM",
                     tags: [
                        "Vendor Advisory",
                     ],
                     url: "https://security.paloaltonetworks.com/CVE-2020-2050",
                  },
               ],
            },
         },
         impact: {
            baseMetricV2: {
               acInsufInfo: false,
               cvssV2: {
                  accessComplexity: "LOW",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "NONE",
                  baseScore: 6.4,
                  confidentialityImpact: "PARTIAL",
                  integrityImpact: "PARTIAL",
                  vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:N",
                  version: "2.0",
               },
               exploitabilityScore: 10,
               impactScore: 4.9,
               obtainAllPrivilege: false,
               obtainOtherPrivilege: false,
               obtainUserPrivilege: false,
               severity: "MEDIUM",
               userInteractionRequired: false,
            },
            baseMetricV3: {
               cvssV3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 8.2,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
                  version: "3.1",
               },
               exploitabilityScore: 3.9,
               impactScore: 4.2,
            },
         },
         lastModifiedDate: "2020-11-24T18:19Z",
         publishedDate: "2020-11-12T00:15Z",
      },
   },
}

ghsa-cgjw-gjmx-29p4

Vulnerability from github

Published

2022-05-24 17:33

Modified

2022-05-24 17:33

Details

Show details on source website

JSON

To clipboard

{
   affected: [],
   aliases: [
      "CVE-2020-2050",
   ],
   database_specific: {
      cwe_ids: [
         "CWE-287",
      ],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2020-11-12T00:15:00Z",
      severity: "HIGH",
   },
   details: "An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to restricted VPN network resources when the gateway or portal is configured to rely entirely on certificate-based authentication. Impacted features that use SSL VPN with client certificate verification are: GlobalProtect Gateway, GlobalProtect Portal, GlobalProtect Clientless VPN In configurations where client certificate verification is used in conjunction with other authentication methods, the protections added by the certificate check are ignored as a result of this issue. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.17; PAN-OS 9.0 versions earlier than PAN-OS 9.0.11; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.",
   id: "GHSA-cgjw-gjmx-29p4",
   modified: "2022-05-24T17:33:54Z",
   published: "2022-05-24T17:33:54Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2020-2050",
      },
      {
         type: "WEB",
         url: "https://security.paloaltonetworks.com/CVE-2020-2050",
      },
   ],
   schema_version: "1.4.0",
   severity: [],
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

cve-2020-2050

Vulnerability from cvelistv5

fkie_cve-2020-2050

Vulnerability from fkie_nvd

gsd-2020-2050

Vulnerability from gsd

ghsa-cgjw-gjmx-29p4

Vulnerability from github

Tags

Sightings

Nomenclature