PT-2022-12955 · Palo Alto Networks · Cortex Xsoar

Ömür Uğur · Published 2022-02-10 · Updated 2023-04-10 · CVE-2022-0020

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Palo Alto Network Cortex XSOAR versions 6.1.0 Palo Alto Network Cortex XSOAR version 6.2.0 builds earlier than 1958888

Description A stored cross-site scripting (XSS) vulnerability in the Palo Alto Network Cortex XSOAR web interface allows an authenticated network-based attacker to store a persistent javascript payload. This payload can perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter it during normal operations.

Recommendations For Cortex XSOAR versions 6.1.0, update to a version that includes the fix for this issue. For Cortex XSOAR version 6.2.0 builds earlier than 1958888, update to a build 1958888 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-0020

Affected Products

Cortex Xsoar

References · 6

• 🔥 https://exploit-db.com/exploits/51343 · Exploit
• https://osv.dev/vulnerability/CVE-2022-0020 · Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2022-0020 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0020 · Security Note
• https://t.me/cibsecurity/37238 · Telegram Post
• http://packetstormsecurity.com/files/171782/Palo-Alto-Cortex-XSOAR-6.5.0-Cross-Site-Scripting.html · Note