PT-2020-15245 · Palo Alto Networks · Cortex Xdr Agent
Paul Van Der Haas
·
Published
2020-12-09
·
Updated
2020-12-11
·
CVE-2020-2020
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Cortex XDR Agent versions prior to 5.0.10
Cortex XDR Agent versions prior to 6.1.7
Cortex XDR Agent versions prior to 7.0.3
Cortex XDR Agent versions prior to 7.1.2
Description
An improper handling of exceptional conditions issue allows a local authenticated Windows user to create files in the software's internal program directory, preventing the Cortex XDR Agent from starting. The condition is persistent and prevents the agent from starting when the software or machine is restarted.
Recommendations
For versions prior to 5.0.10, update to version 5.0.10 or later.
For versions prior to 6.1.7, update to version 6.1.7 or later.
For versions prior to 7.0.3, update to version 7.0.3 or later.
For versions prior to 7.1.2, update to version 7.1.2 or later.
Fix
Improper Handling of Exceptional Conditions
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cortex Xdr Agent