QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-5912

Back to search

CVE-2024-5912

Published: Jul 10, 2024

Modified: Aug 1, 2024

PUBLISHED

Description

An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR agent's executable blocking capabilities and run untrusted executables on the device. This issue can be leveraged to execute untrusted software without being detected or blocked.

VendorProductVersions

Palo Alto Networks

Cortex XDR Agent

unaffected
8.4
unaffected
8.3-CE
unaffected
8.3
affected
7.9-CE - < 7.9.102-CE
affected
8.2 - < 8.2.2

Weaknesses (CWE)

CWE-347

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now