Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine
CVE-2023-3282
6.4MEDIUM
Key Information
- Vendor
- Palo Alto Networks
- Status
- Cortex Xsoar
- Vendor
- CVE Published:
- 8 November 2023
Badges
👾 Exploit Exists
Summary
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.
Affected Version(s)
Cortex XSOAR < 6.10.0.250144
Cortex XSOAR >= 6.11
Cortex XSOAR >= 6.12
CVSS V3.1
Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
- 👾
Exploit exists.
Risk change from: 6.7 to: 6.4 - (MEDIUM)
Initial publication
Vulnerability published.
Vulnerability Reserved.
Collectors
NVD DatabaseMitre Database
Credit
Romeo Benzoni