VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Sep 14, 2022· Updated Jun 17, 2026

CVE-2022-0029

CVE-2022-0029

Description

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Paloaltonetworks/Cortex Xdr Agent4 versions
    cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:*:*:*:*range: >=5.0,<5.0.12
    • cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:critical_environment:*:*:*range: >=7.5,<7.5.101
    • (no CPE)
    • (no CPE)range: 7.8 all

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.