CVE-2023-3282 MEDIUM

CVE-2023-3282: Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine

Vendor Palo Alto Networks
Product Cortex XSOAR
Weakness CWE-732
Published November 8, 2023
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

6.4/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.

Key dates

02Disclosure timeline

November 8, 2023 CVE published
August 2, 2024 Record updated