CVE-2024-5905CWE-346

Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent

Low · published June 12, 2024

CVSS v4.0
2.0
EPSS
0%
Percentile
0.4
In the wild
Unconfirmed
What it is

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows user to disrupt some functionality of the agent. However, they are not able to disrupt Cortex XDR agent protection mechanisms using this vulnerability.

The record
Technical detail
CVSS v4.0
2.0 · LOW
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/AU:Y/R:U/V:D/RE:M/U:Amber
EPSS
0.00089 · 0.4th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2024-06-12T16:20Z
EPSS history
Timeline
  • 12 JUN 16:20Z
    Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent
    cvelistv5