Palo Alto Networks Cortex XSOAR 8.10.x < 8.13.0.11 Path Traversal

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(321509);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/06/26");

  script_cve_id("CVE-2026-0270");
  script_xref(name:"IAVA", value:"2026-A-0617");

  script_name(english:"Palo Alto Networks Cortex XSOAR 8.10.x < 8.13.0.11 Path Traversal");

  script_set_attribute(attribute:"synopsis", value:
"An application installed on the remote host is affected by a path traversal vulnerability.");
  script_set_attribute(attribute:"description", value:
"According to its self-reported version, the Palo Alto Networks Cortex XSOAR application installed on the remote Linux
host is affected by a path traversal vulnerability:

  - A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an
    unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response
    traffic via a man-in-the-middle (MITM) attack, to write arbitrary files to the host. (CVE-2026-0270)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://security.paloaltonetworks.com/CVE-2026-0270");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Palo Alto Networks Cortex XSOAR version 8.13.0.11 or later.");
  script_set_attribute(attribute:"agent", value:"unix");
  script_set_cvss_base_vector("CVSS2#AV:A/AC:H/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_supplemental", value:"CVSS:4.0/AU:Y/R:U/V:D/RE:M/U:Amber");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:U");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-0270");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/06/10");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/06/10");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/06/18");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:paloaltonetworks:cortex_xsoar");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_set_attribute(attribute:"stig_severity", value:"II");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("palo_alto_demisto_nix_installed.nbin");
  script_require_keys("installed_sw/Palo Alto Cortex XSOAR");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'product': {'name': 'Palo Alto Cortex XSOAR', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [
        {'min_version': '8.10.0', 'fixed_version': '8.13.0.11'}
      ]
    }
  ]
};

var vdf_result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_WARNING);
vdf::handle_check_and_report_errors(vdf_result:vdf_result);