Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine

CVE-2022-0031
6.7MEDIUM

Key Information

Vendor
Palo Alto Networks
Status
Cortex Xsoar
Vendor
CVE Published:
9 November 2022

Summary

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs with elevated privileges.

Affected Version(s)

Cortex XSOAR <= 6.9.0.0

Cortex XSOAR < 6.9.0.130766

Cortex XSOAR = 6.8.0.0

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database

Credit

Palo Alto Networks thanks Olivier Caillault for discovering and reporting this issue.
.