← CVE Intelligence

CVE-2022-0029

Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File PUBLISHED

Description (CNA)

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / Cortex XDR Agentaffected 7.7 before 7.7.3; affected 7.5 CE before 7.5.101-CE; affected 5.0 before 5.0.12-hotfix update
Palo Alto Networks / Cortex XDR Agentunaffected 7.8 all; unaffected 7.7.3 before 7.7*; unaffected 7.5.101-CE before 7.5 CE*; unaffected 5.0.12-hotfix update before 5.0*

CWE

CWE-59

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.