topic Re: vulnerability protection signature for CVE-2020-0601 in General Topics

vulnerability protection signature for CVE-2020-0601

wahxwah — Thu, 16 Jan 2020 09:25:09 GMT

kiwi — Thu, 16 Jan 2020 11:30:17 GMT

There's no record for it in the Threatvault

I'd recommend reaching out to support.

Cheers !

-Kiwi.

Ryan_Tobey — Fri, 17 Jan 2020 13:56:18 GMT

Is there a timeline as to when this will be available?

RobGibbs — Fri, 17 Jan 2020 18:09:13 GMT

My reply from support on it...

Comment: Hi Robert,

I wanted to update you our Content Team is still working on this escalation and I also wanted to share a link that goes over mitigation actions just in case.

https://media.defense.gov/2020/Jan/14/2002234275/-1/-1/0/CSA-WINDOWS-10-CRYPT-LIB-20190114.PDF

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/decryption/decryption-concepts/no-decryption-decryption-profile

You can set your firewall to harden the 'Server Certificate Validation' especially 'Block sessions with untrusted issuers' in 'Decryption Profile' per link above.

lukeakrigg — Wed, 22 Jan 2020 04:03:59 GMT

Any update on this? A signature would be fantastic if possible.