Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine

CVE-2023-3282
6.4MEDIUM

Key Information

Status
Cortex Xsoar
Vendor
CVE Published:
8 November 2023

Badges

👾 Exploit Exists

Summary

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.

Affected Version(s)

Cortex XSOAR < 6.10.0.250144

Cortex XSOAR >= 6.11

Cortex XSOAR >= 6.12

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit exists.

  • Risk change from: 6.7 to: 6.4 - (MEDIUM)

  • Initial publication

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database

Credit

Romeo Benzoni
.