CVE-2024-9470
published 2024-10-09CVE-2024-9470: A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data.
PriorityP427medium5.3CVSS 4.0
AVNACLATNPRLUINVCLVINVANSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUYRAVDREMUAmber
EPSS
0.37%
28.5th percentile
A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| palo_alto_networks | cortex_xsoar | >= 6.12.0 < 6.12.0 (Build 1271551) | 6.12.0 (Build 1271551) |
| paloalto | cortex_xsoar | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-mjq9-jh93-349m: A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data
ghsa_unreviewed·2024-10-09
CVE-2024-9470 [MEDIUM] CWE-497 GHSA-mjq9-jh93-349m: A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data
A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data.
Palo Alto
Cortex XSOAR: Information Disclosure Vulnerability
vendor_paloalto·2024-10-09·CVSS 5.3
CVE-2024-9470 [MEDIUM] CWE-497 Cortex XSOAR: Information Disclosure Vulnerability
Cortex XSOAR: Information Disclosure Vulnerability
A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data.
Affected products: Cortex XSOAR
Solution: This issue is fixed in Cortex XSOAR 6.12.0 (Build 1271551), and all later Cortex XSOAR versions.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-10-09
Published