CVE-2024-9470 - Cortex XSOAR: Information Disclosure Vulnerability

MEDIUM

Cortex XSOAR: Information Disclosure Vulnerability

Published Oct 9, 2024

5.3

MEDIUM

CVSS 4.0

EPSS 0.38%

A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Palo Alto Networks	Cortex XSOAR	unaffected	Affected ≥ 6.12.0, < 6.12.0 (Build 1271551) Unaffected 6.13.0 8.0.0

Vendor solution

This issue is fixed in Cortex XSOAR 6.12.0 (Build 1271551), and all later Cortex XSOAR versions.

Weaknesses (1)

CWE-497

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-49962		Advisory
https://security.paloaltonetworks.com/CVE-2024-9470		vendor-advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner palo_alto

Published Oct 9, 2024

Updated Oct 18, 2024

Reserved Oct 3, 2024

CISA Vulnrichment

Updated Oct 10, 2024

NVD

Status Deferred

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner palo_alto

Published Oct 9, 2024

Updated Oct 18, 2024

GitHub

No data