Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine
CVE-2022-0031

6.7MEDIUM

Key Information:

Vendor

Palo Alto Networks
Status
Cortex Xsoar
Vendor
CVE Published:
9 November 2022

Badges

👾 Exploit Exists

What is CVE-2022-0031?

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs with elevated privileges.

Affected Version(s)

Cortex XSOAR Linux 6.9.0.0

Cortex XSOAR Linux 6.9.0.0 < 6.9.0.130766

Cortex XSOAR Linux 6.8.0.0

References

https://security.paloaltonetworks.com/CVE-2022-0031

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Palo Alto Networks thanks Olivier Caillault for discovering and reporting this issue.
.