Lucene search
PRIOn knowledge basePRION:CVE-2023-0001HistoryFeb 08, 2023 - 6:15 p.m.
Information disclosure
2023-02-0818:15:00
PRIOn knowledge base
www.prio-n.com
5
information exposure
cortex xdr
windows devices
local admin
cleartext password
privileged commands
An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then use to execute privileged cytool commands that disable or uninstall the agent.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cortex_xdr_agent | ge | 7.5 | |
| cortex_xdr_agent | lt | 7.5.101 |
Related
cve
cve
CVE-2023-0001
2023-02-08 18:15:11
nvd
nvd
CVE-2023-0001
2023-02-08 18:15:11
paloalto
paloalto
Cortex XDR Agent: Cleartext Exposure of Agent Admin Password
2023-02-08 17:00:00
Cortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR Server
2023-02-08 17:00:00
cvelist
cvelist
CVE-2023-0001 Cortex XDR Agent: Cleartext Exposure of Agent Admin Password
2023-02-08 17:20:20
nessus
nessus
Palo Alto Cortex XDR Agent 7.5.x < 7.5.101-CE Cleartext Credential
2023-05-30 00:00:00