CVE-2020-1989

—

CVSS 3.1

7.8 high

EPSS

<1%p18

Published

Apr 8, 2020 (Apr 8, 2020)

Modified

Jun 17, 2026

Description

An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for Linux 5.0 versions before 5.0.8; 5.1 versions before 5.1.1.

Vendors: paloaltonetworks
Products: globalprotect
Weakness: CWE-266, CWE-269
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.