PT-2024-39652 · Palo Alto Networks · Cortex Xsoar

Bobby Roos · Published 2024-10-09 · Updated 2024-10-10 · CVE-2024-9470

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/AU:Y/R:A/V:D/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions Cortex XSOAR (affected versions not specified)

Description A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2024-9470

Affected Products

Cortex Xsoar

References · 4

• https://security.paloaltonetworks.com/CVE-2024-9470 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-9470 · Security Note
• https://t.me/cvedetector/7511 · Telegram Post
• https://twitter.com/CVEnew/status/1844064006526427138 · Twitter Post