CVE-2022-0015 | Palo Alto Cortex XDR Agent 权限升级

1	30
0	19

source_cve_nvd_summary	1
exploit_price_0day	1
vulnerability_cvss3_meta_tempscore	1
vulnerability_cvss3_meta_basescore	1
vulnerability_cvss3_vuldb_tempscore	1

90%	38
50%	10
70%	1

90%

50%

70%

90%	38
80%	10
70%	1

90%

80%

70%

ID	已提交	用户	字段	更改	备注	已接受	原因	C
12050165	2022-01-15	VulD...	cve_nvd_summary	A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables an authenticated local user to execute programs with elevated privileges. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9.	cve.mitre.org	2022-01-15	已接受	70
12037597	2022-01-12	VulD...	price_0day	$0-$5k	see exploit price documentation	2022-01-12	已接受	90
12037596	2022-01-12	VulD...	cvss3_meta_tempscore	8.1	see CVSS documentation	2022-01-12	已接受	90
12037595	2022-01-12	VulD...	cvss3_meta_basescore	8.3	see CVSS documentation	2022-01-12	已接受	90
12037594	2022-01-12	VulD...	cvss3_vuldb_tempscore	8.4	see CVSS documentation	2022-01-12	已接受	90
12037593	2022-01-12	VulD...	cvss3_vuldb_basescore	8.8	see CVSS documentation	2022-01-12	已接受	90
12037592	2022-01-12	VulD...	cvss2_vuldb_tempscore	7.8	see CVSS documentation	2022-01-12	已接受	90
12037591	2022-01-12	VulD...	cvss2_vuldb_basescore	9.0	see CVSS documentation	2022-01-12	已接受	90
12037590	2022-01-12	VulD...	cvss3_cna_basescore	7.8	see CVSS documentation	2022-01-12	已接受	90
12037589	2022-01-12	VulD...	cvss3_vuldb_e	X	derived from historical data	2022-01-12	已接受	80
12037588	2022-01-12	VulD...	cvss2_vuldb_e	ND	derived from historical data	2022-01-12	已接受	80
12037587	2022-01-12	VulD...	cvss2_vuldb_au	S	derived from historical data	2022-01-12	已接受	80
12037586	2022-01-12	VulD...	cvss2_vuldb_rl	OF	derived from vuldb v3 vector	2022-01-12	已接受	80
12037585	2022-01-12	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	2022-01-12	已接受	80
12037584	2022-01-12	VulD...	cvss2_vuldb_ai	C	derived from vuldb v3 vector	2022-01-12	已接受	80
12037583	2022-01-12	VulD...	cvss2_vuldb_ii	C	derived from vuldb v3 vector	2022-01-12	已接受	80
12037582	2022-01-12	VulD...	cvss2_vuldb_ci	C	derived from vuldb v3 vector	2022-01-12	已接受	80
12037581	2022-01-12	VulD...	cvss2_vuldb_ac	L	derived from vuldb v3 vector	2022-01-12	已接受	80
12037580	2022-01-12	VulD...	cvss2_vuldb_av	N	derived from vuldb v3 vector	2022-01-12	已接受	80
12037579	2022-01-12	VulD...	date	1641942000 (2022-01-12)		2022-01-12	已接受	90

已提交

用户

字段

更改

备注

已接受

原因

A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables an authenticated local user to execute programs with elevated privileges. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9.