Unrated severityNVD Advisory· Published Jan 12, 2022· Updated Sep 16, 2024
Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File
CVE-2022-0013
Description
A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a support file. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
25.0 < 5.0.12; 6.1 < 6.1.9; 7.2 < 7.2.4; 7.3 < 7.3.2+ 1 more
- (no CPE)range: 5.0 < 5.0.12; 6.1 < 6.1.9; 7.2 < 7.2.4; 7.3 < 7.3.2
- (no CPE)range: 7.2
Patches
Vulnerability mechanics
References
1- security.paloaltonetworks.com/CVE-2022-0013mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.