The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 8.1.12 or 8.0.x prior to 8.1.12 or 8.1.x prior to 8.1.12 or 9.0.x prior to 9.0.6. It is, therefore, affected by a vulnerability.

  - An external control of path and data vulnerability in     the Palo Alto Networks PAN-OS Panorama XSLT processing     logic that allows an unauthenticated user with network     access to PAN-OS management interface to write attacker     supplied file on the system and elevate privileges. This     issue affects: All PAN-OS 7.1 Panorama versions; PAN-OS     8.0 versions earlier than 8.0.21 on Panorama; PAN-OS 8.1     versions earlier than 8.1.12 on Panorama; PAN-OS 9.0     versions earlier than 9.0.6 on Panorama. (CVE-2020-2001)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

CVE-2020-2001

critical

Tenable Plugins

critical