CVE-2023-3282
Assigner: palo_alto
Published: 2023-11-08T17:22:58.976Z
State: PUBLISHED
affected: defaultStatus: unaffected
platforms: Linux
product: Cortex XSOAR
vendor: Palo Alto Networks
versions: changes: at: 6.10.0.250144
status: unaffected
lessThan: 6.10.0.250144
status: affected
version: 6.10
versionType: custom
status: unaffected
version: 6.11
status: unaffected
version: 6.12
status: unaffected
version: 8
configurations: supportingMedia: base64: no
type: text/html
value: This issue is applicable only to Cortex XSOAR engines installed through the shell method that are running on a Linux operating system.<br><br>Please see the following link for more Cortex XSOAR engine installation information:<br><a target="_blank" rel="nofollow" href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.10/Cortex-XSOAR-Administrator-Guide/Install-a-Cortex-XSOAR-Engine">https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.10/Cortex-XSOAR-Administrator-Guide/Instal...</a><br>
value: This issue is applicable only to Cortex XSOAR engines installed through the shell method that are running on a Linux operating system.

Please see the following link for more Cortex XSOAR engine installation information:
 https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.10/Cortex-XSOAR-Administrator-Guide/Instal... https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.10/Cortex-XSOAR-Administrator-Guide/Install-a-Cortex-XSOAR-Engine 

credits: type: finder
value: Romeo Benzoni
datePublic: 2023-11-08T17:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.
value: A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.
exploits: supportingMedia: base64: no
type: text/html
value: Palo Alto Networks is not aware of any malicious exploitation of this issue.<br>
value: Palo Alto Networks is not aware of any malicious exploitation of this issue.

impacts: capecId: CAPEC-233
descriptions: value: CAPEC-233 Privilege Escalation
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.4
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-732
description: CWE-732 Incorrect Permission Assignment for Critical Resource
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: This issue is fixed in deployed Cortex XSOAR engines when an updated engine installer is created and used to upgrade the engine from Cortex XSOAR 6.10 build B250144 and all later builds of Cortex XSOAR.<br>
value: This issue is fixed in deployed Cortex XSOAR engines when an updated engine installer is created and used to upgrade the engine from Cortex XSOAR 6.10 build B250144 and all later builds of Cortex XSOAR.

source: defect: CRTX-70551
discovery: EXTERNAL
timeline: time: 2023-11-08T17:00:00.000Z
value: Initial publication
title: Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine
x_generator: engine: Vulnogram 0.1.0-dev