Vulnerability · Published Jan 12, 2022 · Assigned by palo_alto

CVE-2022-0013Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File

Medium 5.0

In plain English

A medium-severity security flaw in Cortex XDR Agent from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).

Severity (CVSS 3.1)5.0Medium

Exploit odds (30 days)0.2%top 86.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a support file. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2.

Affected products (as reported)

Vendor	Product	Versions
Palo Alto Networks	Cortex XDR Agent	7.2 – before 7.2.45.0 – before 5.0.126.1 – before 6.1.97.3 – before 7.3.2

Weakness: CWE-538 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

References

https://security.paloaltonetworks.com/CVE-2022-0013 x_refsource_MISC