CVE-2024-8690

Sept. 11, 2024, 5:15 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Palo Alto Networks Cortex XDR agent

Source

psirt@paloaltonetworks.com

Tags

CVE-2024-8690 details

Published : Sept. 11, 2024, 5:15 p.m.
Last Modified : Sept. 11, 2024, 5:15 p.m.

Description

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description
CWE-440 Expected Behavior Violation A feature, API, or function does not perform according to its specification.

References

URL Source
https://security.paloaltonetworks.com/CVE-2024-8690 psirt@paloaltonetworks.com
This website uses the NVD API, but is not approved or certified by it.