CISA Known Exploited Vulnerability

CVE-2020-2021 Ransomware

Palo Alto Networks · PAN-OS

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Date added 2022-03-25

BOD 22-01 due date 2022-04-15

CWE CWE-347

Ransomware Known

CISA description

Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication.

Apply updates per vendor instructions.

Vulnerability data triggers these controls during assessment and continuous monitoring.