CVE-2022-0012CWE-59

Cortex XDR Agent: Local Arbitrary File Deletion Vulnerability

Medium · published January 12, 2022

CVSS v3.1
6.1
EPSS
0%
Percentile
14.7
In the wild
Unconfirmed
What it is

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary system files and impact the system integrity or cause a denial of service condition. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00243 · 14.7th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2022-01-12T17:30Z
EPSS history
Timeline
  • 12 JAN 17:30Z
    Cortex XDR Agent: Local Arbitrary File Deletion Vulnerability
    cvelistv5