Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-0029

Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Cortex XDR Agent

  • 7.7 to < 7.7.3affected
  • 7.5 CE to < 7.5.101-CEaffected
  • 5.0 to < 5.0.12-hotfix updateaffected

Palo Alto Networks Cortex XDR Agent

  • 7.8 allunaffected
  • 7.7.3 to < 7.7*unaffected
  • 7.5.101-CE to < 7.5 CE*unaffected
  • 5.0.12-hotfix update to < 5.0*unaffected

References