CVE-2024-9470
Medium
Description
A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Paloaltonetworks Cortex Xsoar
PublishedOct 9, 2024
First seenOct 9, 2024
Weakness typeCWE-497CWE-497
How to fix
Update
- paloaltonetworks cortex_xsoar6.12.0 (Build 1271551) or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paloaltonetworks cortex_xsoar | 6.12.0 ≤ v < 6.12.0 (Build 1271551) | 6.12.0 (Build 1271551) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.