CVE-2023-0001

An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then use to execute privileged cytool commands that disable or uninstall the agent.

Score

CVSS 3.1 6.7 Medium

Status

Modified - psirt@paloaltonetworks.com

Published

2023-02-08

Last modified

2024-08-02

Weaknesses

CWE-319

Affected products

• Cortex Xdr Agent (Palo Alto Networks)
• Cortex Xdr Agent (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2023-0001