HC3 Sector Alert TLP White: CVE-2020-2021 PAN-OS: Authentication Bypass in SAML Authentication, June 30, 2020

On June 29, 2020, Palo Alto Networks announced a vulnerability (CVE-2020-2021) affecting their PAN-OS firewall software. The vulnerability has a 10/10 CVSSv3 score which “means the vulnerability is both easy to exploit as it doesn't require advanced technical skills, and it's remotely exploitable via the internet, without requiring attackers to gain an initial foothold on the attacked device.” Also on June 29, USCYBERCOM Cybersecurity Alert (@CNMF_CyberAlert) tweeted that they expected “Foreign APTs will likely attempt exploit soon.

Related Resources

Guides/Reports
As a member of the Healthcare and Public Health Sector, you play a significant role in national security by protecting the nation and its economy from hazards…
Standards/Guidelines
Public
Agent Tesla is an established Remote Access Trojan (RAT) written in .Net. A successful deployment of Agent Tesla provides attackers with full computer or…
Webinar Recordings
Public
The U.S. Department of Health and Human Services’ (HHS) Health Sector Cybersecurity Coordination Center (HC3) invites you to join its monthly cybersecurity…
AHA Center for Health Innovation Market Scan
Free Identity Protection In the spirit of helping front-line virus fighting organizations during these uncertain times, KII Consulting Inc., in partnership…
Guides/Reports
Working from Home during COVID-19 Pandemic During the COVID-19 pandemic, many physicians are working from home, using their personal computers and mobile…
Guides/Reports
Public
Mozilla Patches Critical Vulnerabilities in Firefox, Firefox ESR 04/03/2020 04:45 PM EDT Original release date: April 3, 2020 Mozilla has released security…