Show filters

Showing topic results for "CVE-2020-2021":

(1-1 of 1)

Sort by:
Attacker Value
Very High

CVE-2020-2021 PAN-OS: Authentication Bypass in SAML Authentication

Disclosure Date: June 29, 2020 (last updated June 30, 2020)
When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate' option is disabled (unchecked), improper verification of signatures in PAN-OS SAML authentication enables an unauthenticated network-based attacker to access protected resources. The attacker must have network access to the vulnerable server to exploit this vulnerability.
Utility Class: Other