Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-0031

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs with elevated privileges.

Published

2022-11-09T18:15:12.263

Last Modified

2024-11-21T06:37:51.570

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-345
  • Type: Primary
    CWE-345
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application paloaltonetworks cortex_xsoar 6.5.0 Yes
Application paloaltonetworks cortex_xsoar 6.5.0 Yes
Application paloaltonetworks cortex_xsoar 6.5.0 Yes
Application paloaltonetworks cortex_xsoar 6.6.0 Yes
Application paloaltonetworks cortex_xsoar 6.6.0 Yes
Application paloaltonetworks cortex_xsoar 6.6.0 Yes
Application paloaltonetworks cortex_xsoar 6.6.0 Yes
Application paloaltonetworks cortex_xsoar 6.8.0 Yes
Operating System linux linux_kernel - No
References