Tracker / CVE-2022-0013
CVE-2022-0013
Medium 5.0
A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a support file. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2.
Affected products and versions
| paloaltonetworks | cortex_xdr_agent · 5.0 → 5.0.12 |
|---|---|
| paloaltonetworks | cortex_xdr_agent · 6.1 → 6.1.9 |
| paloaltonetworks | cortex_xdr_agent · 7.2 → 7.2.4 |
| paloaltonetworks | cortex_xdr_agent · 7.3 → 7.3.2 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.