Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2022-0031

Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs with elevated privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Cortex XSOAR

Default version status: affected

  • 6.9.0.0 to < 6.9.0.130766affected
  • 6.8.0.0affected
  • 6.6.0.0affected
  • 6.5.0.0affected

References