Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-0002

Cortex XDR Agent: Product Disruption by Local Windows User

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Cortex XDR agent

Default version status: unaffected

  • 7.9 Allunaffected
  • 7.8 Allunaffected
  • 7.5 to < 7.5.101-CEaffected
  • 5.0 to < 5.0.12.22203affected

References