CVE-2020-1991 – Traps: Insecure temporary file vulnerability may allow privilege escalation on Windows

https://notcve.org/view.php?id=CVE-2020-1991

An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks Traps 5.0 versions before 5.0.8; 6.1 versions before 6.1.4 on Windows. This issue does not affect Cortex XDR 7.0. This issue does not affect Traps for Linux or MacOS. Una vulnerabilidad de archivo temporal no seguro en Palo Alto Networks Traps, permite a un usuario de Windows autenticado local escalar privilegios o sobrescribir archivos del sistema. • https://security.paloaltonetworks.com/CVE-2020-1991 • CWE-269: Improper Privilege Management CWE-377: Insecure Temporary File •