UpHeron
All vulnerabilities

Servers and applications

CVE-2020-2035

When SSL/TLS Forward Proxy Decryption mode has been configured to decrypt the web transactions, the PAN-OS URL filtering feature inspects the HTTP Host and URL path headers for policy enforcement on the decrypted HTTPS web transactions but does not consider Server Name Indication (SNI) field within the TLS Client Hello handshake. This allows a compromised host in a protected network to evade any…

Severity
Low 3.0
Published
12 Aug 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os
  • Every version

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-2035
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-2035