CVE-2020-1987 GlobalProtect App: VPN cookie local information disclosure
Attack Vector LOCAL
Scope UNCHANGED
Attack Complexity LOW
Confidentiality Impact LOW
Privileges Required LOW
Integrity Impact NONE
User Interaction REQUIRED
Availability Impact NONE
Description
An information exposure vulnerability in the logging component of Palo Alto Networks GlobalProtect App allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump".
This issue affects Palo Alto Networks GlobalProtect App 5.0 versions prior to 5.0.9; 5.1 versions prior to 5.1.1.
Product Status
| Versions | Affected | Unaffected |
|---|---|---|
| GlobalProtect App 5.1 | < 5.1.1 | >= 5.1.1 |
| GlobalProtect App 5.0 | < 5.0.9 | >= 5.0.9 |
Severity:LOW
CVSSv3.1 Base Score:2.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N)
Weakness Type
CWE-215 Information Exposure Through Debug Information
Solution
This issue is fixed in GlobalProtect App 5.0.9, GlobalProtect App 5.1.1 and all later versions.
Acknowledgments
Palo Alto Networks thanks Ahmet Hrnjadovic for discovering and reporting this issue.
Timeline
Initial publication