Skip to content
OpenAdvisories
Medium · 5.5 CVE-2022-0029 EUVD-2022-15250GHSA-42jf-jcvf-jgrw

Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File

Published Sep 14, 2022 · Updated Jun 4, 2025 · Assigned by palo_alto

Description

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file.

Affected products

VendorProductAffectedFixed
Palo Alto Networks Cortex XDR Agent 7.7 – < 7.7.3, 7.5 CE – < 7.5.101-CE, 5.0 – < 5.0.12-hotfix update 7.7.3

References