Description
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | Cortex XDR Agent | 7.9 – < 7.9.102-CE, 8.3 – < 8.3.1, 8.4 – < 8.4.1 | 7.9.102-CE |
References
- https://security.paloaltonetworks.com/CVE-2024-9469 vendor-advisory