An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for Linux 5.0 versions before 5.0.8; 5.1 versions before 5.1.1.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1989
Reference (s):
- https://security.paloaltonetworks.com/CVE-2020-1989