CVE-2023-0001

6.7 mediumEPSS 0.2%

Medium (6.7) in paloaltonetworks cortex xdr agent. EPSS 0.2% chance of exploitation in the next 30 days.

An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then use to execute privileged cytool commands that disable or uninstall the agent.

Severity

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2023-02-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

paloaltonetworks:cortex_xdr_agent

References

https://security.paloaltonetworks.com/CVE-2023-0001
https://security.paloaltonetworks.com/CVE-2023-0001

Check your stack JSON