Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine
CVE-2023-3282

6.4MEDIUM

Key Information:

Vendor

Palo Alto Networks
Status
Cortex Xsoar
Vendor
CVE Published:
8 November 2023

Badges

👾 Exploit Exists

What is CVE-2023-3282?

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.

Affected Version(s)

Cortex XSOAR Linux 6.10 < 6.10.0.250144

Cortex XSOAR Linux 6.11

Cortex XSOAR Linux 6.12

References

https://security.paloaltonetworks.com/CVE-2023-3282

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Romeo Benzoni
.