CVE-2024-9470 — Exposure of Sensitive System Information to an Unauthorized Control Sphere in Palo Alto Networks Cortex Xsoar

CWE-497 — Exposure of Sensitive System Information to an Unauthorized Control Sphere4 documents4 sources
Severity
5.3MEDIUMNVD
EPSS
0.2%
top 54.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Palo Alto Networks Cortex XsoarPaloalto Cortex Xsoar
Timeline
PublishedOct 9

Description

A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5palo_alto_networks/cortex_xsoar6.12.0 — 6.12.0 (Build 1271551)

🔴Vulnerability Details

2
CVEList
Cortex XSOAR: Information Disclosure Vulnerability↗2024-10-09
▶
GHSA
GHSA-mjq9-jh93-349m: A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data↗2024-10-09
▶

📋Vendor Advisories

1
Palo Alto
Cortex XSOAR: Information Disclosure Vulnerability↗2024-10-09
▶
CVE-2024-9470 — Palo vulnerability | cvebase