CVE-2023-3282Medium

CVE-2023-3282 Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine

Published
November 8, 2023
Last Modified
November 8, 2023

🔗 CVE IDs covered (1)

CVE-2023-3282 →

📋 Description

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.

🎯 Affected products1

  • Cortex XSOAR

✅ Remediation

This issue is fixed in deployed Cortex XSOAR engines when an updated engine installer is created and used to upgrade the engine from Cortex XSOAR 6.10 build B250144 and all later builds of Cortex XSOAR.

🔗 References (1)