CVE-2022-0025

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Cortex XDR agent versions prior to 7.7.0 with content update 500 or later on Windows Palo Alto Networks Cortex XDR agent version 7.7.0 without content update 500 or a later version on Windows

Description A local privilege escalation issue exists in the Palo Alto Networks Cortex XDR agent software on Windows, allowing an authenticated local user with file creation privilege in the Windows root directory to execute a program with elevated privileges.

Recommendations For Palo Alto Networks Cortex XDR agent versions prior to 7.7.0, update to version 7.7.0 and apply content update 500 or a later version. For Palo Alto Networks Cortex XDR agent version 7.7.0, apply content update 500 or a later version.