Skip to main content

Cortex Xsoar CVE-2023-0003

MEDIUM
External Control of File Name or Path (CWE-73)
2023-02-08 psirt@paloaltonetworks.com
Information Disclosure Paloalto Cortex Xsoar Fedora
6.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Feb 08, 2023 - 18:15 nvd
MEDIUM 6.5

DescriptionNVD

A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.

AnalysisAI

A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-73. A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server. Affected products include: Paloaltonetworks Cortex Xsoar, Fedoraproject Fedora.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Cortex Xsoar

View all
CVE-2021-3044 CRITICAL
9.8 Jun 22

An improper authorization vulnerability in Palo Alto Networks Cortex XSOAR enables a remote unauthenticated attacker wit
CVE-2021-3051 HIGH
8.1 Sep 08

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enable
CVE-2023-3282 MEDIUM
6.7 Nov 08

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linu
CVE-2022-0031 MEDIUM
6.7 Nov 09

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linu
CVE-2021-3034 MEDIUM
5.1 Mar 10

An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for

CVE-2026-0270 MEDIUM
4.8 Jun 10

Path traversal in Palo Alto Networks Cortex XSOAR engine on Linux enables arbitrary file write to the host system by an

CVE-2022-0027 MEDIUM
4.3 May 11

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Re
CVE-2021-3049 MEDIUM
4.3 Sep 08

An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-b

Same weakness CWE-73 – External Control of File Name or Path

View all
CVE-2025-33053 HIGH POC
8.8
CVE-2023-4634 CRITICAL POC
9.8
CVE-2025-24054 MEDIUM POC
6.5
CVE-2025-0111 HIGH
7.1
CVE-2024-8517 CRITICAL POC
9.8
CVE-2024-55372 CRITICAL POC
9.8
CVE-2024-55371 CRITICAL POC
9.8
CVE-2025-29709 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2023-0003 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy