CVEvulnerability

CVE-2023-0003

6.5 MEDIUM Published 2023-02-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-02-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-610, CWE-73

Description

A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.

Affected configurations

• paloaltonetworks cortex xsoar (>= 6.10.0 < 6.10.0.185964) • paloaltonetworks cortex xsoar 6.6.0 • paloaltonetworks cortex xsoar 6.8.0 • paloaltonetworks cortex xsoar 6.9.0 • fedoraproject fedora 37 • fedoraproject fedora 38 • fedoraproject fedora 39

Related

Weakness · CWE (2)

  • CWE-610 Externally Controlled Reference to a Resource in Another Sphere weakness
  • CWE-73 External Control of File Name or Path weakness

References