CVE-2023-0001: medium-severity vulnerability in Palo Alto Networks Cortex XDR agent
Cortex XDR Agent: Cleartext Exposure of Agent Admin Password
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6epss 0.2%
An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then use to execute privileged cytool commands that disable or uninstall the agent.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
Affected products
Palo Alto Networks · Cortex XDR agentRelated CVEs — Palo Alto Networks Cortex XDR agent
In the same product, most dangerous first.