CVE-2023-0001CWE-319

Cortex XDR Agent: Cleartext Exposure of Agent Admin Password

Medium · published February 8, 2023

CVSS v3.1
6.0
EPSS
0%
Percentile
11.0
In the wild
Unconfirmed
What it is

An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then use to execute privileged cytool commands that disable or uninstall the agent.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00213 · 11.0th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2023-02-08T17:20Z
EPSS history
Timeline
  • 08 FEB 17:20Z
    Cortex XDR Agent: Cleartext Exposure of Agent Admin Password
    cvelistv5