Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Apr 15, 2022

CVE-2020-2021

High
EPSS 21.1%CISA KEVRansomware

Description

Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication.

EPSS — Exploit Probability

21.1%

Higher than 95.6% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2020-2021

Risk Assessment

HIGH
In CISA KEV
Ransomware

Details

Severity
High
EPSS
21.1%
CISA KEV
Yes
Ransomware
Known
Articles
0

Timeline

Published

Mar 25, 2022

Added to KEV

Mar 25, 2022

Remediation Due

Apr 15, 2022

Affected Product

Palo Alto Networks

PAN-OS

View all Palo Alto Networks CVEs