title: Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine
description: A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.
problem types: CWE-732 Incorrect Permission Assignment for Critical Resource
affected:
{
defaultStatus: unaffected
platforms: Linux
product: Cortex XSOAR
vendor: Palo Alto Networks
versions:
changes: [at: 6.10.0.250144, status: unaffected], lessThan: 6.10.0.250144, status: affected, version: 6.10, versionType: custom
status: unaffected, version: 6.11
status: unaffected, version: 6.12
status: unaffected, version: 8
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.4
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
exploits: Palo Alto Networks is not aware of any malicious exploitation of this issue.
solutions: This issue is fixed in deployed Cortex XSOAR engines when an updated engine installer is created and used to upgrade the engine from Cortex XSOAR 6.10 build B250144 and all later builds of Cortex XSOAR.