CVE-2024-9470
Cortex XSOAR: Information Disclosure Vulnerability
Severity
Medium 5.3
CVSS 4.0
Exploited
Not listed
EPSS
0.004
30.9th percentile
Discovered by
Third party
Published by the vendor
Published
Oct 9, 2024
Assigned by palo_alto
Description
A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data.
Weakness: CWE-497
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | Cortex XSOAR | SIEM & Log Management | cna-assigner |
Vendor-reported affected versions (1)
- Palo Alto Networks · Cortex XSOAR
Credit
Bobby Roos of Kyndryl CSIRT
Vendor remediation
This issue is fixed in Cortex XSOAR 6.12.0 (Build 1271551), and all later Cortex XSOAR versions.