CoreCVE
Back

HIGH

Global Protect Agent: Incorrect privilege assignment allows local privilege escalation

Published Apr 8, 2020

Description

An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for Linux 5.0 versions before 5.0.8; 5.1 versions before 5.1.1.

Affected products

Remediation

Vendor solution

This issue is fixed in Global Protect Agent 5.0.8, Global Protect Agent 5.1.1 and all later versions.

Weaknesses (2)

CWE-266

Incorrect Privilege Assignment

CWE-269

Improper Privilege Management

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner palo_alto
Published Apr 8, 2020
Updated Sep 16, 2024
Reserved Dec 4, 2019
Link CVE-2020-1989
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-1989
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-1989