Credentials management in VM-Series Virtual Firewalls - CVE-2020-1978
Published: April 9, 2020
Vulnerability identifier: #VU26734
CSH Severity: Low
CVSS v4: 5.2 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-1978
CWE-ID: CWE-255
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to obtain account credentials.
The vulnerability exists due to the TechSupport files generated on VM Series firewalls for Microsoft Azure platform configured with high availability (HA) inadvertently collect Azure dashboard service account credentials. A local administrator can manage all the Azure resources in the subscription except for granting access to other resources.
Note: These credentials do not allow login access to the VMs themselves.
Affected software
VM-Series Virtual Firewalls
How to mitigate CVE-2020-1978
Install updates from vendor's website.
VM-Series Virtual Firewalls - update to 1.0.9