CVE-2022-0029

🗓️ 14 Sep 2022 16:35:08Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 80 Views

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-0029	14 Sep 202216:00	–	attackerkb
Circl	CVE-2022-0029	14 Sep 202220:26	–	circl
CNNVD	Palo Alto Networks Cortex XDR 后置链接漏洞	14 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-0029 Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File	14 Sep 202216:35	–	cvelist
EUVD	EUVD-2022-15250	3 Oct 202520:07	–	euvd
NVD	CVE-2022-0029	14 Sep 202217:15	–	nvd
OSV	CVE-2022-0029	14 Sep 202217:15	–	osv
Palo Alto Networks	Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File	14 Sep 202216:00	–	paloalto
Prion	Input validation	14 Sep 202217:15	–	prion
Positive Technologies	PT-2022-12962 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Agent	14 Sep 202200:00	–	ptsecurity

NVD

Vulners

Node

paloaltonetworks cortex_xdr_agentRange5.0–5.0.12

paloaltonetworks cortex_xdr_agentRange7.5–7.5.101critical_environment

paloaltonetworks cortex_xdr_agentRange7.7–7.7.3

AND

microsoft windowsMatch-

[
  {
    "platforms": [
      "Windows"
    ],
    "product": "Cortex XDR Agent",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "lessThan": "7.7.3",
        "status": "affected",
        "version": "7.7",
        "versionType": "custom"
      },
      {
        "lessThan": "7.5.101-CE",
        "status": "affected",
        "version": "7.5 CE",
        "versionType": "custom"
      },
      {
        "lessThan": "5.0.12-hotfix update",
        "status": "affected",
        "version": "5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Cortex XDR Agent",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.8 all"
      },
      {
        "lessThan": "7.7*",
        "status": "unaffected",
        "version": "7.7.3",
        "versionType": "custom"
      },
      {
        "lessThan": "7.5 CE*",
        "status": "unaffected",
        "version": "7.5.101-CE",
        "versionType": "custom"
      },
      {
        "lessThan": "5.0*",
        "status": "unaffected",
        "version": "5.0.12-hotfix update",
        "versionType": "custom"
      }
    ]
  }
]