Skip to content
OpenAdvisories
Medium · 6.4 CVE-2023-3282 EUVD-2023-43957GHSA-583v-xw8h-qw2h

Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine

Published Nov 8, 2023 · Updated Aug 2, 2024 · Assigned by palo_alto

Description

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.

Affected products

VendorProductAffectedFixed
Palo Alto Networks Cortex XSOAR 6.10 – < 6.10.0.250144 6.10.0.250144

Advisories 1

References