CVE-2022-0014

Name of the Vulnerable Software and Affected Versions Cortex XDR agent versions prior to 5.0.12 Cortex XDR agent versions prior to 6.1.9 Cortex XDR agent versions prior to 7.2.4 Cortex XDR agent versions prior to 7.3.2

Description An untrusted search path issue exists in the Palo Alto Networks Cortex XDR agent, allowing a local attacker with file creation privilege in the Windows root directory to store a program that can then be unintentionally executed by another local user when that user utilizes a Live Terminal session.

Recommendations For versions prior to 5.0.12, update to version 5.0.12 or later. For versions prior to 6.1.9, update to version 6.1.9 or later. For versions prior to 7.2.4, update to version 7.2.4 or later. For versions prior to 7.3.2, update to version 7.3.2 or later.