A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.
| Software | From | Fixed in |
|---|---|---|
| paloaltonetworks / cortex_xsoar | 6.8.0-3261002 | 6.8.0-3261002.x |
| paloaltonetworks / cortex_xsoar | 6.6.0-2585049 | 6.6.0-2585049.x |
| paloaltonetworks / cortex_xsoar | 6.6.0-2889656 | 6.6.0-2889656.x |
| paloaltonetworks / cortex_xsoar | 6.6.0-3049220 | 6.6.0-3049220.x |
| paloaltonetworks / cortex_xsoar | 6.6.0-3124193 | 6.6.0-3124193.x |
| paloaltonetworks / cortex_xsoar | 6.8.0-176620 | 6.8.0-176620.x |
| paloaltonetworks / cortex_xsoar | 6.10.0 | 6.10.0.185964 |
| paloaltonetworks / cortex_xsoar | 6.9.0-177754 | 6.9.0-177754.x |
| paloaltonetworks / cortex_xsoar | 6.9.0-130766 | 6.9.0-130766.x |
| fedoraproject / fedora | 37 | 37.x |
| fedoraproject / fedora | 38 | 38.x |
| fedoraproject / fedora | 39 | 39.x |