← CVE Intelligence

CVE-2024-5909

Cortex XDR Agent: Local Windows User Can Disable the Agent PUBLISHED

Description (CNA)

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / Cortex XDR Agentunaffected 8.4.0; unaffected 8.3.0; affected 8.2.0 before 8.2.1; affected 8.1.0 before 8.1.2; affected 7.9-CE before 7.9.102-CE

CWE

CWE-269

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.