CVE-2020-1994: 
PAN-OS vulnerability analysis and mitigation

A predictable temporary file vulnerability was discovered in PAN-OS (CVE-2020-1994) that allows a local authenticated user with shell access to corrupt arbitrary system files affecting the integrity of the system. The vulnerability was disclosed on May 13, 2020, and affects multiple versions of PAN-OS including all versions of PAN-OS 7.1 and 8.0, PAN-OS 8.1 versions earlier than 8.1.13, and PAN-OS 9.0 versions earlier than 9.0.7 (Palo Alto Advisory).

The vulnerability has been assigned a CVSS v3.1 Base Score of 4.1 (MEDIUM) with the following vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N. This indicates a local attack vector with high attack complexity, requiring high privileges, no user interaction, unchanged scope, no impact on confidentiality, high impact on integrity, and no impact on availability. The vulnerability is classified under CWE-377 (Insecure Temporary File) (Palo Alto Advisory).

The vulnerability allows an authenticated user with shell access to corrupt arbitrary system files, which can affect the overall integrity of the system. The impact is primarily focused on system integrity, with no direct impact on confidentiality or availability (Palo Alto Advisory).

The vulnerability requires local access and high privileges for exploitation. The attack complexity is considered high, indicating that specific conditions need to be met for successful exploitation. The attacker must already have shell access to the system to exploit this vulnerability (Palo Alto Advisory).

The vulnerability has been fixed in PAN-OS versions 8.1.13, 9.0.7, 9.1.0, and all later PAN-OS versions. For PAN-OS 8.0, which is end-of-life as of October 31, 2019, no patches are available as it is no longer covered by Product Security Assurance policies. PAN-OS 7.1 is on extended support until June 30, 2020, and is only being considered for critical security vulnerability fixes (Palo Alto Advisory).