ID:3469 - Exploit for SAML authenticated bypass in Palo Alto PAN-OS - CVE-2020-2021

 
Main Vulnerability Database Exploits ID:3469 - Exploit for SAML authenticated bypass in Palo Alto PAN-OS - CVE-2020-2021

ID:3469 - Exploit for SAML authenticated bypass in Palo Alto PAN-OS - CVE-2020-2021

Published: July 15, 2020


Vulnerability identifier: #VU29387
Vulnerability risk: High
CVE-ID: CVE-2020-2021
CWE-ID: CWE-287
Exploitation vector: Remote access
Vulnerable software:
Palo Alto PAN-OS

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error in when processing SAML authentication requests. A remote attacker can bypass authentication process and gain unauthorized access to protected resources.


Remediation

Install updates from vendor's website.