4.8
Moyenne
CVE-2026-0270 A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an…
Description
A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response traffic via a man-in-the-middle (MITM) attack, to write arbitrary files to the host.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cortex XSOAR | 8.12.0 | Pas de correctif indiqué |
| Cortex XSOAR | 8.11.0 | Pas de correctif indiqué |
| Cortex XSOAR | 8.10.0 | Pas de correctif indiqué |
| Cortex XSOAR 6.14 | premières → < 6.14.0 | 6.14.0 |
| Cortex XSOAR 6.13 | premières → < 6.13.0 | 6.13.0 |
| Cortex XSOAR 6.12 | premières → < 6.12.0 | 6.12.0 |
Références
- security.paloaltonetworks.com security.paloaltonetworks.com
- CVE-2007-4559: Python tarfile module path traversal nvd.nist.gov
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cortex XSOAR
Les 11 CVE de Cortex XSOAR →
CVE-2024-9470
A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view…
5.3
Moyenne
CVE-2023-3282
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a…
6.4
Moyenne
CVE-2023-0003
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user…
6.5
Moyenne
CVE-2022-0031
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a…
6.7
Moyenne