| Package | Affected versions | Patched versions |
|---|---|---|
| cortex xdr agent | ≥ 5.0, < 5.0.12≥ 6.1, < 6.1.9≥ 7.2, < 7.2.4≥ 7.3, < 7.3.2 | 5.0.126.1.97.2.47.3.2 |
A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a support file. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free