CVE-2020-1988

Description

An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the root of the OS disk (C:) or to Program Files directory to gain system privileges. This issue affects Palo Alto Networks GlobalProtect Agent 5.0 versions before 5.0.5; 4.1 versions before 4.1.13 on Windows;

Risk Information

Base Score

6.7

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.13

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-17435,CVE-2020-1988 are affected in Global Protect (Microsoft Store) 4.1.12	Windows
Vulnerabilities CVE-2019-17435,CVE-2020-1988 are affected in Global Protect (Microsoft Store) 5.0.3	Windows
Vulnerabilities CVE-2020-1988 are affected in Global Protect (Microsoft Store) 5.0.4	Windows
Vulnerabilities CVE-2019-17435 ,CVE-2020-1988 are affected in globalprotect 5.0.3	NCM
Unquoted Search Path or Element Vulnerability (CVE-2020-1988)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234