CVE-2022-0013

🗓️ 12 Jan 2022 17:30:17Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 67 Views

A file information exposure vulnerability in Palo Alto Networks Cortex XDR agent allows local attacker to read arbitrary files on system with elevated privileges

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2022-0013	12 Jan 202220:17	–	circl
CNNVD	Palo Alto Networks Cortex XDR 信息泄露漏洞	12 Jan 202200:00	–	cnnvd
CNVD	Palo Alto Networks Cortex XDR Information Disclosure Vulnerability	3 Feb 202200:00	–	cnvd
Cvelist	CVE-2022-0013 Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File	12 Jan 202217:30	–	cvelist
EUVD	EUVD-2022-15234	3 Oct 202520:07	–	euvd
NVD	CVE-2022-0013	12 Jan 202218:15	–	nvd
OSV	CVE-2022-0013	12 Jan 202218:15	–	osv
Palo Alto Networks	Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File	12 Jan 202217:00	–	paloalto
Prion	Information disclosure	12 Jan 202218:15	–	prion

NVD

Vulners

Node

paloaltonetworks cortex_xdr_agentRange5.0–5.0.12

paloaltonetworks cortex_xdr_agentRange6.1–6.1.9

paloaltonetworks cortex_xdr_agentRange7.2–7.2.4

paloaltonetworks cortex_xdr_agentRange7.3–7.3.2

AND

microsoft windowsMatch-

[
  {
    "product": "Cortex XDR Agent",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.4.*"
      },
      {
        "status": "unaffected",
        "version": "7.5.*"
      },
      {
        "changes": [
          {
            "at": "7.2.4",
            "status": "unaffected"
          }
        ],
        "lessThan": "7.2.4",
        "status": "affected",
        "version": "7.2",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "5.0.12",
            "status": "unaffected"
          }
        ],
        "lessThan": "5.0.12",
        "status": "affected",
        "version": "5.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "6.1.9",
            "status": "unaffected"
          }
        ],
        "lessThan": "6.1.9",
        "status": "affected",
        "version": "6.1",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "7.3.2",
            "status": "unaffected"
          }
        ],
        "lessThan": "7.3.2",
        "status": "affected",
        "version": "7.3",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2022-0013

21 Nov 2024 06:37Current

4.9Medium risk

Vulners AI Score4.9

CVSS 22.1

CVSS 3.15 - 5.5

EPSS0.00053