CVE-2020-2038 – PAN-OS: OS command injection vulnerability in the management web interface

https://notcve.org/view.php?id=CVE-2020-2038

09 Sep 2020 — An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 9.0 versions earlier than 9.0.10; PAN-OS 9.1 versions earlier than 9.1.4; PAN-OS 10.0 versions earlier than 10.0.1. Una vulnerabilidad de Inyección de Comandos del Sistema Operativo en la interfaz de administración de PAN-OS que permite a los administradores autenticados ejecutar comandos de Sistema Operativo arbit... • https://packetstorm.news/files/id/168008 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •