7.2
CVSSv2

CVE-2020-1988

Published: 08/04/2020 Updated: 09/04/2020
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
CVSS v3 Base Score: 6.7 | Impact Score: 5.9 | Exploitability Score: 0.8
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the root of the OS disk (C:\) or to Program Files directory to gain system privileges. This issue affects Palo Alto Networks GlobalProtect Agent 5.0 versions prior to 5.0.5; 4.1 versions prior to 4.1.13 on Windows;

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

paloaltonetworks globalprotect