CVE-2022-0012 | Palo Alto Cortex XDR Agent elévation de privilèges

1	31
0	19

source_cve_nvd_summary	1
exploit_price_0day	1
vulnerability_cvss3_meta_tempscore	1
vulnerability_cvss3_meta_basescore	1
vulnerability_cvss3_vuldb_tempscore	1

90%	39
50%	10
70%	1

90%

50%

70%

90%	39
80%	10
70%	1

90%

80%

70%

ID	Engagé	Utilisateur	Domaine	Changement	Remarques	Accepté	Raison	C
12050163	15/01/2022	VulD...	cve_nvd_summary	An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary system files and impact the system integrity or cause a denial of service condition. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2.	cve.mitre.org	15/01/2022	accepté	70
12037498	12/01/2022	VulD...	price_0day	$0-$5k	see exploit price documentation	12/01/2022	accepté	90
12037497	12/01/2022	VulD...	cvss3_meta_tempscore	5.6	see CVSS documentation	12/01/2022	accepté	90
12037496	12/01/2022	VulD...	cvss3_meta_basescore	5.7	see CVSS documentation	12/01/2022	accepté	90
12037495	12/01/2022	VulD...	cvss3_vuldb_tempscore	5.2	see CVSS documentation	12/01/2022	accepté	90
12037494	12/01/2022	VulD...	cvss3_vuldb_basescore	5.4	see CVSS documentation	12/01/2022	accepté	90
12037493	12/01/2022	VulD...	cvss2_vuldb_tempscore	4.8	see CVSS documentation	12/01/2022	accepté	90
12037492	12/01/2022	VulD...	cvss2_vuldb_basescore	5.5	see CVSS documentation	12/01/2022	accepté	90
12037491	12/01/2022	VulD...	cvss3_cna_basescore	6.1	see CVSS documentation	12/01/2022	accepté	90
12037490	12/01/2022	VulD...	cvss3_vuldb_e	X	derived from historical data	12/01/2022	accepté	80
12037489	12/01/2022	VulD...	cvss2_vuldb_e	ND	derived from historical data	12/01/2022	accepté	80
12037488	12/01/2022	VulD...	cvss2_vuldb_au	S	derived from historical data	12/01/2022	accepté	80
12037487	12/01/2022	VulD...	cvss2_vuldb_rl	OF	derived from vuldb v3 vector	12/01/2022	accepté	80
12037486	12/01/2022	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	12/01/2022	accepté	80
12037485	12/01/2022	VulD...	cvss2_vuldb_ai	P	derived from vuldb v3 vector	12/01/2022	accepté	80
12037484	12/01/2022	VulD...	cvss2_vuldb_ii	P	derived from vuldb v3 vector	12/01/2022	accepté	80
12037483	12/01/2022	VulD...	cvss2_vuldb_ci	N	derived from vuldb v3 vector	12/01/2022	accepté	80
12037482	12/01/2022	VulD...	cvss2_vuldb_ac	L	derived from vuldb v3 vector	12/01/2022	accepté	80
12037481	12/01/2022	VulD...	cvss2_vuldb_av	N	derived from vuldb v3 vector	12/01/2022	accepté	80
12037480	12/01/2022	VulD...	date	1641942000 (12/01/2022)		12/01/2022	accepté	90

Engagé

Utilisateur

Domaine

Changement

Remarques

Accepté

Raison