All vulnerabilities

Servers and applications

CVE-2020-2018

An authentication bypass vulnerability in the Panorama context switching feature allows an attacker with network access to a Panorama's management interface to gain privileged access to managed firewalls. An attacker requires some knowledge of managed firewalls to exploit this issue. This issue does not affect Panorama configured with custom certificates authentication for communication between…

Severity
Critical 9.0
Published
13 May 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
7.1.26, 8.1.12, 9.0.6
Sources
NVD

Affected software

SoftwareAffected versions
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os
  • From 7.1.0 before 7.1.26
  • From 8.0.0 up to 8.0.20
  • From 8.1.0 before 8.1.12
  • From 9.0.0 before 9.0.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-2018
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-2018