CVE-2020-2020

paloaltonetworks cortex xdr agent

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-2020

Katalog CVE

CVSS 5.5 · Medium EPSS 0,31%

Kerentanan Improper Handling of Exceptional Conditions pada paloaltonetworks cortex xdr agent. Skor CVSS 3.1 5.5 (Medium) menurut paloaltonetworks.com.

Deskripsi (NVD)

An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the software's internal program directory that prevents the Cortex XDR Agent from starting. The exceptional condition is persistent and prevents Cortex XDR Agent from starting when the software or machine is restarted. This issue impacts: Cortex XDR Agent 5.0 versions earlier than 5.0.10; Cortex XDR Agent 6.1 versions earlier than 6.1.7; Cortex XDR Agent 7.0 versions earlier than 7.0.3; Cortex XDR Agent 7.1 versions earlier than 7.1.2.

Rincian

Terbit di NVD
9 Desember 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.5 (Medium), sumber paloaltonetworks.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-755: Improper Handling of Exceptional Conditions
EPSS (30 hari)
0,31% peluang dieksploitasi; lebih tinggi dari 21,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
paloaltonetworks cortex xdr agent Versi 5.0 hingga sebelum 5.0.10
paloaltonetworks cortex xdr agent Versi 6.1 hingga sebelum 6.1.7
paloaltonetworks cortex xdr agent Versi 7.0 hingga sebelum 7.0.3
paloaltonetworks cortex xdr agent Versi 7.1 hingga sebelum 7.1.2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.