PT-2023-1384 · Palo Alto Networks · Palo Alto Networks Cortex Xsoar

Eric Turpin · Publicado 2023-02-08 · Atualizado 2024-02-16 · CVE-2023-0003

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Cortex XSOAR (affected versions not specified)

Description A file disclosure issue in the Palo Alto Networks Cortex XSOAR server software allows an authenticated user with access to the web interface to read local files from the server. This is related to incorrect external control of a file name or path. Exploitation of this issue may enable a remote attacker to read arbitrary files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-610

CWE-73

Identificadores relacionados

BDU:2023-00751

CVE-2023-0003

Produtos afetados

Palo Alto Networks Cortex Xsoar

Referências · 19

• https://lists.fedoraproject.org/archives/list/[e-mail]/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG · Aviso do Fabricante
• https://t.me/cvenotify/71757 · Publicação no Telegram
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/UEJWL67XR67JAGEL2ZK22NA3BRKNMZNY · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ · Aviso do Fabricante
• https://t.me/cvenotify/43914 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-0003 · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y · Aviso do Fabricante
• https://t.me/cvenotify/54819 · Publicação no Telegram
• https://security.paloaltonetworks.com/CVE-2023-0003 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/VEEQIN5242K5NBE2CZ4DYTNA5B4YTYE5 · Aviso do Fabricante
• https://t.me/cvenotify/54608 · Publicação no Telegram
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-00751 · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/VKFMKD4MJZIKFQJAAJ4VZ2FHIJ764A76 · Aviso do Fabricante