What is CVE-2023-0002?

CVE-2023-0002 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. CVE-2023-0002 Cortex XDR Agent: Product Disruption by Local Windows User

Which CVE IDs does CVE-2023-0002 cover?

CVE-2023-0002 covers the following CVE IDs: CVE-2023-0002. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2023-0002?

CVE-2023-0002 affects 1 product, including: Cortex XDR Agent.

CVE-2023-0002Medium

CVE-2023-0002 Cortex XDR Agent: Product Disruption by Local Windows User

Vendor

Palo Alto Networks Security Advisories

Published

February 8, 2023

Last Modified

February 8, 2023

🔗 CVE IDs covered (1)

CVE-2023-0002 →

📋 Description

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent.

🎯 Affected products1

Cortex XDR Agent

✅ Remediation

This issue is fixed in Cortex XDR agent 5.0.12.22203, Cortex XDR agent 7.5.101-CE, and all later supported Cortex XDR agent versions. Workarounds and mitigations: There are no known workarounds for this issue.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2023-0002