Lucene search
+L

Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation

🗓️ 09 Dec 2020 17:00:00Reported by Palo Alto Networks Product Security Incident Response TeamType 
paloalto
 paloalto
🔗 securityadvisories.paloaltonetworks.com👁 70 Views

Improper control of loaded DLL leads to local privilege escalation in Cortex XDR Agent on Windows platform, allowing authenticated local user to execute programs with SYSTEM privileges by creating files in root directory

Related
Detection
Refs
ReporterTitlePublishedViews
Family
CNNVD
Palo Alto Networks Cortex XDR Agent 代码问题漏洞
9 Dec 202000:00
cnnvd
CNVD
Palo Alto Networks Cortex XDR Agent Code Issue Vulnerability
8 Jan 202100:00
cnvd
CVE
CVE-2020-2049
9 Dec 202018:00
cve
Cvelist
CVE-2020-2049 Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation
9 Dec 202018:00
cvelist
EUVD
EUVD-2020-22075
7 Oct 202500:30
euvd
NVD
CVE-2020-2049
9 Dec 202018:15
nvd
OSV
CVE-2020-2049
9 Dec 202018:15
osv
Prion
Privilege escalation
9 Dec 202018:15
prion
Vulners

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Dec 2020 17:00Current
3.5Low risk
Vulners AI Score3.5
CVSS 3.17.8
CVSS 27.2
EPSS0.00341
70