CVE-2024-5907Medium

CVE-2024-5907 Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability

Published
June 12, 2024
Last Modified
June 12, 2024

🔗 CVE IDs covered (1)

CVE-2024-5907 →

📋 Description

A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.

🎯 Affected products1

  • Cortex XDR Agent

✅ Remediation

This issue is fixed in Cortex XDR agent 7.9.102-CE, Cortex XDR agent 8.2.3, Cortex XDR agent 8.3.1, and all later Cortex XDR agent versions. This issue will not be addressed in Cortex XDR agent 8.1, which reached end-of-life (EoL) status on April 9, 2024.

🔗 References (1)