Palo Alto Cortex XSOAR File Disclosure via Authenticated Web Interface
CVE-2023-0003 Published on February 8, 2023
Cortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR Server
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.
Vulnerability Analysis
CVE-2023-0003 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Timeline
Initial publication
Weakness Type
External Control of File Name or Path
The software allows user input to control or influence paths or file names that are used in filesystem operations.
Products Associated with CVE-2023-0003
stack.watch emails you whenever new vulnerabilities are published in Palo Alto Networks Cortex Xsoar or Fedora Project Fedora. Just hit a watch button to start following.
Affected Versions
Palo Alto Networks Cortex XSOAR:- Version 8.1 All is unaffected.
- Version 6.10.0.0 and below 6.10.0.185964 is affected.
- Version 6.9 and below 6.9.B185415 is affected.
- Version 6.8 and below 6.8.B185719 is affected.
- Version 6.6 and below 6.6.B186115 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.