What is CVE-2024-5914?

CVE-2024-5914 is a security advisory published by Palo Alto Networks Security Advisories with High severity. CVE-2024-5914 Cortex XSOAR: Command Injection in CommonScripts Pack

Which CVE IDs does CVE-2024-5914 cover?

CVE-2024-5914 covers the following CVE IDs: CVE-2024-5914. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2024-5914?

CVE-2024-5914 affects 1 product, including: Cortex XSOAR CommonScripts.

CVE-2024-5914High

CVE-2024-5914 Cortex XSOAR: Command Injection in CommonScripts Pack

Vendor

Palo Alto Networks Security Advisories

Published

August 14, 2024

Last Modified

August 14, 2024

🔗 CVE IDs covered (1)

CVE-2024-5914 →

📋 Description

A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary commands within the context of an integration container.

🎯 Affected products1

Cortex XSOAR CommonScripts

✅ Remediation

This issue is fixed in Cortex XSOAR CommonScripts 1.12.33 and all later versions. Workarounds and mitigations: Remove any integration usage of the ScheduleGenericPolling or GenericPollingScheduledTask scripts from the CommonScripts pack.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2024-5914