漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Cortex XDR Agent: Local Arbitrary File Deletion Vulnerability
Vulnerability Description
An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary system files and impact the system integrity or cause a denial of service condition. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Vulnerability Type
在文件访问前对链接解析不恰当(链接跟随)
Vulnerability Title
Palo Alto Networks Cortex XDR 后置链接漏洞
Vulnerability Description
Palo Alto Networks Cortex XDR是马来西亚Palo Alto Networks公司的一个用于基于远程端点检测的安全运营平台。 Palo Alto Networks Cortex XDR agent on Windows 存在后置链接漏洞，该漏洞允许本地用户能够删除任意系统文件并影响系统完整性或导致拒绝服务情况。此问题影响： Cortex XDR 代理 5.0 版本早于 Cortex XDR 代理 5.0.12；Cortex XDR 代理 6.1 版本早于 Cortex XDR 代
CVSS Information
N/A
Vulnerability Type
N/A