What is CVE-2022-0015?

CVE-2022-0015 is a security advisory published by Palo Alto Networks Security Advisories with High severity. CVE-2022-0015 Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability

Which CVE IDs does CVE-2022-0015 cover?

CVE-2022-0015 covers the following CVE IDs: CVE-2022-0015. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2022-0015?

CVE-2022-0015 affects 1 product, including: Cortex XDR Agent.

CVE-2022-0015High

CVE-2022-0015 Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability

Vendor

Palo Alto Networks Security Advisories

Published

January 12, 2022

Last Modified

January 12, 2022

🔗 CVE IDs covered (1)

CVE-2022-0015 →

📋 Description

A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables an authenticated local user to execute programs with elevated privileges.

This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9.

🎯 Affected products1

Cortex XDR Agent

✅ Remediation

This issue is fixed in Cortex XDR agent 5.0.12, Cortex XDR agent 6.1.9, and all later Cortex XDR agent versions. Workarounds and mitigations: There are no known workarounds for this issue.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2022-0015