CVE-2022-0013

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Cortex XDR agent versions earlier than 5.0.12 Palo Alto Networks Cortex XDR agent versions earlier than 6.1.9 Palo Alto Networks Cortex XDR agent versions earlier than 7.2.4 Palo Alto Networks Cortex XDR agent versions earlier than 7.3.2

Description A file information exposure issue exists in the Palo Alto Networks Cortex XDR agent, allowing a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a support file.

Recommendations For versions earlier than 5.0.12, update to version 5.0.12 or later. For versions earlier than 6.1.9, update to version 6.1.9 or later. For versions earlier than 7.2.4, update to version 7.2.4 or later. For versions earlier than 7.3.2, update to version 7.3.2 or later.