CVE-2020-2020

Cortex XDR Agent: Exceptional condition denial-of-service (DoS)

State: Published
Severity: 5.5 Medium
Published: Dec 9, 2020
Updated: Sep 16, 2024
Reserved: Dec 4, 2019

Description

An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the software's internal program directory that prevents the Cortex XDR Agent from starting. The exceptional condition is persistent and prevents Cortex XDR Agent from starting when the software or machine is restarted. This issue impacts: Cortex XDR Agent 5.0 versions earlier than 5.0.10; Cortex XDR Agent 6.1 versions earlier than 6.1.7; Cortex XDR Agent 7.0 versions earlier than 7.0.3; Cortex XDR Agent 7.1 versions earlier than 7.1.2.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	palo_alto

Weaknesses

CWE-755 Improper Handling of Exceptional Conditions

Affected Products

Product	Versions
Cortex XDR AgentPalo Alto Networks	7.0 to before 7.0.3Affectedfrom 7.0.3Not affected 7.1 to before 7.1.2Affectedfrom 7.1.2Not affected 5.0 to before 5.0.10Affectedfrom 5.0.10Not affected 6.1 to before 6.1.7Affectedfrom 6.1.7Not affected 7.2.0 to before 7.2*Not affected

References

https://security.paloaltonetworks.com/CVE-2020-2020

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.