NetSight
medium5.5

CVE-2022-0029

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system wit…

Impact

An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file.

Affected products

VendorProductAffected versions
PaloaltonetworksCortex Xdr Agent
from 5.0 before 5.0.12
from 7.5 before 7.5.101
from 7.7 before 7.7.3

Weakness classification

References