Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2023-3282

Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Cortex XSOAR

Default version status: unaffected

  • 6.10 to < 6.10.0.250144affected
  • 6.11unaffected
  • 6.12unaffected
  • 8unaffected

References