CVE-2022-0013 | Palo Alto Cortex XDR Agent Support File 信息公开

1	32
0	19

source_cve_nvd_summary	1
exploit_price_0day	1
vulnerability_cvss3_meta_tempscore	1
vulnerability_cvss3_meta_basescore	1
vulnerability_cvss3_vuldb_tempscore	1

90%	40
50%	10
70%	1

90%

50%

70%

90%	40
80%	10
70%	1

90%

80%

70%

ID	已提交	用户	字段	更改	备注	已接受	原因	C
12050164	2022-01-15	VulD...	cve_nvd_summary	A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a support file. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2.	cve.mitre.org	2022-01-15	已接受	70
12037548	2022-01-12	VulD...	price_0day	$0-$5k	see exploit price documentation	2022-01-12	已接受	90
12037547	2022-01-12	VulD...	cvss3_meta_tempscore	4.2	see CVSS documentation	2022-01-12	已接受	90
12037546	2022-01-12	VulD...	cvss3_meta_basescore	4.2	see CVSS documentation	2022-01-12	已接受	90
12037545	2022-01-12	VulD...	cvss3_vuldb_tempscore	3.4	see CVSS documentation	2022-01-12	已接受	90
12037544	2022-01-12	VulD...	cvss3_vuldb_basescore	3.5	see CVSS documentation	2022-01-12	已接受	90
12037543	2022-01-12	VulD...	cvss2_vuldb_tempscore	3.5	see CVSS documentation	2022-01-12	已接受	90
12037542	2022-01-12	VulD...	cvss2_vuldb_basescore	4.0	see CVSS documentation	2022-01-12	已接受	90
12037541	2022-01-12	VulD...	cvss3_cna_basescore	5.0	see CVSS documentation	2022-01-12	已接受	90
12037540	2022-01-12	VulD...	cvss3_vuldb_e	X	derived from historical data	2022-01-12	已接受	80
12037539	2022-01-12	VulD...	cvss2_vuldb_e	ND	derived from historical data	2022-01-12	已接受	80
12037538	2022-01-12	VulD...	cvss2_vuldb_au	S	derived from historical data	2022-01-12	已接受	80
12037537	2022-01-12	VulD...	cvss2_vuldb_rl	OF	derived from vuldb v3 vector	2022-01-12	已接受	80
12037536	2022-01-12	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	2022-01-12	已接受	80
12037535	2022-01-12	VulD...	cvss2_vuldb_ai	N	derived from vuldb v3 vector	2022-01-12	已接受	80
12037534	2022-01-12	VulD...	cvss2_vuldb_ii	N	derived from vuldb v3 vector	2022-01-12	已接受	80
12037533	2022-01-12	VulD...	cvss2_vuldb_ci	P	derived from vuldb v3 vector	2022-01-12	已接受	80
12037532	2022-01-12	VulD...	cvss2_vuldb_ac	L	derived from vuldb v3 vector	2022-01-12	已接受	80
12037531	2022-01-12	VulD...	cvss2_vuldb_av	N	derived from vuldb v3 vector	2022-01-12	已接受	80
12037530	2022-01-12	VulD...	date	1641942000 (2022-01-12)		2022-01-12	已接受	90

已提交

用户

字段

更改

备注

已接受

原因