Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine

CVE-2023-3282

6.4MEDIUM

Key Information

Status
Cortex Xsoar
Vendor
CVE Published:
8 November 2023

Badges

👾 Exploit Exists

Summary

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.

Affected Version(s)

Cortex XSOAR < 6.10.0.250144

Cortex XSOAR >= 6.11

Cortex XSOAR >= 6.12

Refferences

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database

Credit

Romeo Benzoni
.