CVE-2022-0027

🗓️ 11 May 2022 16:30:27Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 80 Views

CVE-2022-0027: Improper authorization vulnerability in Palo Alto Network Cortex XSOAR software, allowing non-Read-Only group users to generate unauthorized email reports

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2022-0027	11 May 202220:34	–	circl
CNNVD	Palo Alto Networks Cortex XSOAR 安全漏洞	11 May 202200:00	–	cnnvd
Cvelist	CVE-2022-0027 Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports	11 May 202216:30	–	cvelist
EUVD	EUVD-2022-15248	3 Oct 202520:07	–	euvd
NVD	CVE-2022-0027	11 May 202217:15	–	nvd
OSV	CVE-2022-0027	11 May 202217:15	–	osv
Palo Alto Networks	Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports	11 May 202216:00	–	paloalto
Prion	Authorization	11 May 202217:15	–	prion
Positive Technologies	PT-2022-12961 · Palo Alto Networks · Cortex Xsoar	11 May 202200:00	–	ptsecurity

NVD

Vulners

Node

paloaltonetworks cortex_xsoarRange6.6.0–6.6.0.2585049

paloaltonetworks cortex_xsoarMatch6.1.0-

paloaltonetworks cortex_xsoarMatch6.2.0-

paloaltonetworks cortex_xsoarMatch6.5.0-

[
  {
    "product": "Cortex XSOAR",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "affected",
        "version": "6.1.*"
      },
      {
        "status": "affected",
        "version": "6.2.*"
      },
      {
        "status": "affected",
        "version": "6.5.*"
      },
      {
        "changes": [
          {
            "at": "6.6.0.2585049",
            "status": "unaffected"
          }
        ],
        "lessThan": "6.6.0.2585049",
        "status": "affected",
        "version": "6.6",
        "versionType": "custom"
      }
    ]
  }
]