Vulnerability Description
An uncontrolled resource consumption vulnerability in Palo Alto Networks PAN-OS allows for a remote unauthenticated user to upload temporary files through the management web interface that are not properly deleted after the request is finished. It is possible for an attacker to disrupt the availability of the management web interface by repeatedly uploading files until available disk space is exhausted. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1 versions earlier than PAN-OS 9.1.4; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Paloaltonetworks | Pan-Os | >= 8.1.0, < 8.1.16 |
Related Weaknesses (CWE)
References
- https://security.paloaltonetworks.com/CVE-2020-2039Vendor Advisory
- https://security.paloaltonetworks.com/CVE-2020-2039Vendor Advisory
FAQ
What is CVE-2020-2039?
CVE-2020-2039 is a vulnerability with a CVSS score of 5.3 (MEDIUM). An uncontrolled resource consumption vulnerability in Palo Alto Networks PAN-OS allows for a remote unauthenticated user to upload temporary files through the management web interface that are not pro...
How severe is CVE-2020-2039?
CVE-2020-2039 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-2039?
Check the references section above for vendor advisories and patch information. Affected products include: Paloaltonetworks Pan-Os.