Tracker / CVE-2022-0014
CVE-2022-0014
Medium 6.7
An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory (such as C:\) to store a program that can then be unintentionally executed by another local user when that user utilizes a Live Terminal session. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2.
Affected products and versions
| paloaltonetworks | cortex_xdr_agent · 5.0 → 5.0.12 |
|---|---|
| paloaltonetworks | cortex_xdr_agent · 6.1 → 6.1.9 |
| paloaltonetworks | cortex_xdr_agent · 7.2 → 7.2.4 |
| paloaltonetworks | cortex_xdr_agent · 7.3 → 7.3.2 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.