CVE-2022-0031 MEDIUM

CVE-2022-0031: Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine

Vendor Palo Alto Networks
Product Cortex XSOAR
Weakness CWE-345
Published November 9, 2022
Last update May 1, 2025
View on NVD All CVEs

CVSS base score

6.7/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs with elevated privileges.

Key dates

02Disclosure timeline

November 9, 2022 CVE published
May 1, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-21606 Local Privilege Escalation via Exposed XPC Method Due to Client Verification Failure in stats CVE-2023-35719 ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability CVE-2019-3875 CVE-2026-42575 apko doesn't verify downloaded apk packages against APKINDEX checksum (package substitution possible) CVE-2022-20795 Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense Software AnyConnect SSL VPN Denial of Service Vulnerability