CVE-2020-1991: palo_alto_networks traps Insecure Temporary File
Vulnerability summary
CVE-2020-1991 is a high (CVSS 7.8) Insecure Temporary File vulnerability in palo_alto_networks traps. EPSS estimates a 0.28% chance of exploitation in the next 30 days, higher than 19% of scored vulnerabilities.
Timeline
- 08-04-2020PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks Traps 5.0 versions before 5.0.8; 6.1 versions before 6.1.4 on Windows. This issue does not affect Cortex XDR 7.0. This issue does not affect Traps for Linux or MacOS.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HDiffers
EPSS trend
Probability
0.28%
Chance of exploitation in the next 30 days
Percentile
19%
Versus all other CVEs
30-day change
0.00 pp
From 0.28% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-377Insecure Temporary FileCreating and using insecure temporary files can leave application and system data vulnerable to attack.
- CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Affected systems
Palo_alto_networks1 product
- traps≥ 5.0, < 5.0.8 | ≥ 6.1, < 6.1.4
Paloaltonetworks1 product
- traps≥ 5.0, < 5.0.8 | ≥ 6.1, < 6.1.4
2 vendors · 2 products