Metrics
Affected Vendors & Products
Solution
This issue is fixed in VM-Series Plugin 1.0.9 for Microsoft Azure. Customers who generated TechSupport files on older versions are advised to change their Azure dashboard credentials. Customers are advised to delete any previously generated TechSupport files. Instructions to change the credentials: 1. Create a new Service Principal with a Contributor role in the Azure AD Portal. Instructions to create a new Service Principal can be found here - https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal 2. Update your Azure HA configuration in the PA-VM configuration with the new Service Principal credentials. The steps to update the configuration are provided in “Step 3” of the PA-VM Azure HA configuration guide - https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-azure/configure-activepassive-ha-for-vm-series-firewall-on-azure.html 3. Delete the old Service Principal in the Azure AD Portal that was being used in the Azure HA configuration. Note: If the old Service Principal is used in other applications, then the other applications need to be updated with the new Service Principal.
Workaround
Do not generate TechSupport files on the affected VMs.
Link | Providers |
---|---|
https://security.paloaltonetworks.com/CVE-2020-1978 |
![]() ![]() |
No history.

Status: PUBLISHED
Assigner: palo_alto
Published:
Updated: 2024-09-16T22:35:22.462Z
Reserved: 2019-12-04T00:00:00
Link: CVE-2020-1978

No data.

Status : Modified
Published: 2020-04-08T19:15:13.277
Modified: 2024-11-21T05:11:46.410
Link: CVE-2020-1978

No data.

No data.