CVE-2022-0025

🗓️ 11 May 2022 16:30:24Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 87 Views

Local privilege escalation vulnerability in Palo Alto Networks Cortex XDR agent software on Window

Reporter	Title	Published	Views	Family All 7
CNNVD	Palo Alto Networks Cortex XDR Agent 代码问题漏洞	11 May 202200:00	–	cnnvd
Cvelist	CVE-2022-0025 Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability	11 May 202216:30	–	cvelist
EUVD	EUVD-2022-15246	3 Oct 202520:07	–	euvd
NVD	CVE-2022-0025	11 May 202217:15	–	nvd
OSV	CVE-2022-0025	11 May 202217:15	–	osv
Palo Alto Networks	Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability	11 May 202216:00	–	paloalto
Prion	Privilege escalation	11 May 202217:15	–	prion

NVD

Vulners

Node

paloaltonetworks cortex_xdr_agentRange7.7.0–7.7.1.62043

AND

microsoft windowsMatch-

[
  {
    "platforms": [
      "Windows"
    ],
    "product": "Cortex XDR Agent",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "7.7.1.62043",
            "status": "unaffected"
          }
        ],
        "lessThan": "7.7.1.62043 without CU-500",
        "status": "affected",
        "version": "7.7",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Cortex XDR Agent",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.7.* with CU-500"
      },
      {
        "status": "unaffected",
        "version": "7.6 all"
      },
      {
        "status": "unaffected",
        "version": "7.5 CE all"
      },
      {
        "status": "unaffected",
        "version": "7.4 all"
      },
      {
        "status": "unaffected",
        "version": "7.5 all"
      },
      {
        "status": "unaffected",
        "version": "6.1 all"
      },
      {
        "status": "unaffected",
        "version": "5.0 all"
      }
    ]
  }
]