CVE-2022-0013

🗓️ 12 Jan 2022 17:30:17Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 72 Views

A file information exposure vulnerability in Palo Alto Networks Cortex XDR agent allows local attacker to read arbitrary files on system with elevated privileges

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-0013	12 Jan 202217:00	–	attackerkb
Circl	CVE-2022-0013	12 Jan 202220:17	–	circl
CNNVD	Palo Alto Networks Cortex XDR 信息泄露漏洞	12 Jan 202200:00	–	cnnvd
CNVD	Palo Alto Networks Cortex XDR Information Disclosure Vulnerability	3 Feb 202200:00	–	cnvd
Cvelist	CVE-2022-0013 Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File	12 Jan 202217:30	–	cvelist
EUVD	EUVD-2022-15234	3 Oct 202520:07	–	euvd
NVD	CVE-2022-0013	12 Jan 202218:15	–	nvd
OSV	CVE-2022-0013	12 Jan 202218:15	–	osv
Palo Alto Networks	Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File	12 Jan 202217:00	–	paloalto
Prion	Information disclosure	12 Jan 202218:15	–	prion

NVD

Vulners

Node

paloaltonetworks cortex_xdr_agentRange5.0–5.0.12

paloaltonetworks cortex_xdr_agentRange6.1–6.1.9

paloaltonetworks cortex_xdr_agentRange7.2–7.2.4

paloaltonetworks cortex_xdr_agentRange7.3–7.3.2

AND

microsoft windowsMatch-

[
  {
    "product": "Cortex XDR Agent",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.4.*"
      },
      {
        "status": "unaffected",
        "version": "7.5.*"
      },
      {
        "changes": [
          {
            "at": "7.2.4",
            "status": "unaffected"
          }
        ],
        "lessThan": "7.2.4",
        "status": "affected",
        "version": "7.2",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "5.0.12",
            "status": "unaffected"
          }
        ],
        "lessThan": "5.0.12",
        "status": "affected",
        "version": "5.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "6.1.9",
            "status": "unaffected"
          }
        ],
        "lessThan": "6.1.9",
        "status": "affected",
        "version": "6.1",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "7.3.2",
            "status": "unaffected"
          }
        ],
        "lessThan": "7.3.2",
        "status": "affected",
        "version": "7.3",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2022-0013

17 Jun 2026 04:19Current

4.9Medium risk

Vulners AI Score4.9

CVSS 22.1

CVSS 3.15 - 5.5

EPSS0.0022