Skip to content
OpenAdvisories
High · 7.8 CVE-2020-1991 EUVD-2020-12781GHSA-vfx3-vc54-592p

Traps: Insecure temporary file vulnerability may allow privilege escalation on Windows

Published Apr 8, 2020 · Updated Sep 17, 2024 · Assigned by palo_alto

Description

An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks Traps 5.0 versions before 5.0.8; 6.1 versions before 6.1.4 on Windows. This issue does not affect Cortex XDR 7.0. This issue does not affect Traps for Linux or MacOS.

Affected products

VendorProductAffectedFixed
Palo Alto Networks Traps 5.0 – < 5.0.8, 6.1 – < 6.1.4 5.0.8
Palo Alto Networks Cortex XDR — 7.0.*

References