UpHeron
All vulnerabilities

Servers and applications

CVE-2020-1982

Certain communication between PAN-OS and cloud-delivered services inadvertently use TLS 1.0, which is known to be a cryptographically weak protocol. These cloud services include Cortex Data Lake, the Customer Support Portal, and the Prisma Access infrastructure. Conditions required for exploitation of known TLS 1.0 weaknesses do not exist for the communication between PAN-OS and cloud-delivered…

Severity
Medium 4.8
Published
8 Jul 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
8.1.14, 9.0.9, 9.1.3
Sources
NVD

Affected software

SoftwareAffected versions
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os
  • From 8.0.0 up to 8.0.20
  • From 8.1.0 before 8.1.14
  • From 9.0.0 before 9.0.9
  • From 9.1.0 before 9.1.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-1982
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-1982