A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.
References
Link | Resource |
---|---|
https://security.paloaltonetworks.com/CVE-2024-9469 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
15 Oct 2024, 18:38
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:8.3.0:*:*:*:*:*:*:* |
cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:8.4.0:*:*:*:-:*:*:* cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:critical_environment:*:*:* cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:8.3.0:*:*:*:-:*:*:* |
15 Oct 2024, 18:15
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:8.4.0:*:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:8.3.0:*:*:*:*:*:*:* |
|
First Time |
Microsoft windows
Microsoft Paloaltonetworks cortex Xdr Agent Paloaltonetworks |
|
References | () https://security.paloaltonetworks.com/CVE-2024-9469 - Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
10 Oct 2024, 12:51
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
09 Oct 2024, 17:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-10-09 17:15
Updated : 2024-10-15 18:38
NVD link : CVE-2024-9469
Mitre link : CVE-2024-9469
CVE.ORG link : CVE-2024-9469
JSON object : View
Products Affected
paloaltonetworks
- cortex_xdr_agent
microsoft
- windows
CWE
CWE-754
Improper Check for Unusual or Exceptional Conditions