← CVE Intelligence

CVE-2022-0015

Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability PUBLISHED

Description (CNA)

A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables an authenticated local user to execute programs with elevated privileges. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / Cortex XDR Agentunaffected 7.2.*; unaffected 7.3.*; unaffected 7.4.*; unaffected 7.5.*; unaffected 7.6.*; affected 5.0 before 5.0.12; affected 6.1 before 6.1.9

CWE

CWE-427

References

ADP enrichment

CVE

No English description supplied.