Bartosz Chałek

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Broker VM (affected versions not specified) Description: A missing authentication issue allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Broker VM (affected versions not specified) Description: A command injection issue in the Palo Alto Networks Cortex XDR Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.