CVE-2020-1991 - CVE House

Back to Database

Status published High CVE-2020-1991

Traps: Insecure temporary file vulnerability may allow privilege escalation on Windows

7.8 CVSS

Vulnerability Description

An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks Traps 5.0 versions before 5.0.8; 6.1 versions before 6.1.4 on Windows. This issue does not affect Cortex XDR 7.0. This issue does not affect Traps for Linux or MacOS.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-1991

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Palo Alto Networks thanks Lasse Trolle Borup of Danish Cyber Defence for discovering and reporting this issue.

References

https://security.paloaltonetworks.com/CVE-2020-1991

More from Palo Alto Networks

View All →

PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets

Prisma Browser: Sensitive Information Disclosure Vulnerability in Prisma Browser

Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma Browser

Prisma Browser: Insufficient Validation of Untrusted Input Vulnerability in Prisma Browser

PAN-OS: Improper Neutralization of Input in the Management Web Interface

Affected Vendor

Palo Alto Networks

View all reports →

Affected Software

Traps, Cortex XDR

Vulnerable Versions:

5.0, 6.1, 7.0.*

Timeline

Official Publish: April 8th, 2020

Last Modified: September 17th, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.