Vulnerability · Published May 11, 2022 · Assigned by palo_alto

CVE-2022-0027Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports

Medium 4.3

In plain English

A medium-severity security flaw in Cortex XSOAR from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.5%top 54.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not have access. This issue impacts: All versions of Cortex XSOAR 6.1; All versions of Cortex XSOAR 6.2; All versions of Cortex XSOAR 6.5; Cortex XSOAR 6.6 versions earlier than Cortex XSOAR 6.6.0 build 6.6.0.2585049.

Affected products (as reported)

Vendor	Product	Versions
Palo Alto Networks	Cortex XSOAR	6.1.6.2.6.5.*6.6 – before 6.6.0.2585049

Weakness: CWE-285 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

https://security.paloaltonetworks.com/CVE-2022-0027 x_refsource_MISC