UpHeron
All vulnerabilities

Servers and applications

CVE-2020-2021

When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate' option is disabled (unchecked), improper verification of signatures in PAN-OS SAML authentication enables an unauthenticated network-based attacker to access protected resources. The attacker must have network access to the vulnerable server to exploit this vulnerability.…

Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 25 Mar 2022.

Severity
Critical 10.0
Published
29 Jun 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
8.1.15, 9.0.9, 9.1.3
Sources
NVD

Affected software

SoftwareAffected versions
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os
  • From 8.0.0 up to 8.0.20
  • From 8.1.0 before 8.1.15
  • From 9.0.0 before 9.0.9
  • From 9.1.0 before 9.1.3

Known exploited

CISA name
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Required action
Apply updates per vendor instructions.
Due for US agencies
15 Apr 2022
Used in ransomware
Yes, known

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-2021
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-2021