A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Windows user to execute programs with SYSTEM privileges. This requires the user to have the privilege to create files in the Windows root directory. This issue impacts: All versions of Cortex XDR Agent 7.1 with content update 149 and earlier versions; All versions of Cortex XDR Agent 7.2 with content update 149 and earlier versions.
References
Link | Resource |
---|---|
https://security.paloaltonetworks.com/CVE-2020-2049 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2020-12-09 18:15
Updated : 2024-02-28 18:08
NVD link : CVE-2020-2049
Mitre link : CVE-2020-2049
CVE.ORG link : CVE-2020-2049
JSON object : View
Products Affected
paloaltonetworks
- cortex_xdr_agent
microsoft
- windows
CWE
CWE-427
Uncontrolled Search Path Element