CVE-2022-0027

Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports

State: Published
Severity: 4.3 Medium
Published: May 11, 2022
Updated: Sep 16, 2024
Reserved: Dec 28, 2021

Description

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not have access. This issue impacts: All versions of Cortex XSOAR 6.1; All versions of Cortex XSOAR 6.2; All versions of Cortex XSOAR 6.5; Cortex XSOAR 6.6 versions earlier than Cortex XSOAR 6.6.0 build 6.6.0.2585049.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	palo_alto

Weaknesses

CWE-285 Improper Authorization

Affected Products

Product	Versions
Cortex XSOARPalo Alto Networks	6.1.Affected 6.2.Affected 6.5.*Affected 6.6 to before 6.6.0.2585049Affectedfrom 6.6.0.2585049Not affected

References

https://security.paloaltonetworks.com/CVE-2022-0027

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.