CVE-2022-0031

Published: Nov 9, 2022Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs with elevated privileges.

Affected (8)

Products: Paloaltonetworks: Cortex Xsoar

Paloaltonetworks

1 product

Cortex Xsoar

Configuration A

8 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Paloaltonetworks Cortex Xsoar	Version 6.5.0 2102531
Paloaltonetworks Cortex Xsoar	Version 6.5.0 2410815
Paloaltonetworks Cortex Xsoar	Version 6.5.0 2583817
Paloaltonetworks Cortex Xsoar	Version 6.6.0 2585049
Paloaltonetworks Cortex Xsoar	Version 6.6.0 2889656
Paloaltonetworks Cortex Xsoar	Version 6.6.0 3049220
Paloaltonetworks Cortex Xsoar	Version 6.6.0 3124193
Paloaltonetworks Cortex Xsoar	Version 6.8.0 3261002

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Related CWEs

CWE-345

Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References (2)

https://security.paloaltonetworks.com/CVE-2022-0031

Source: psirt@paloaltonetworks.com

Vendor Advisory

https://security.paloaltonetworks.com/CVE-2022-0031

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.