Security Advisory
CVE-2023-0001
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then use to execute privileged cytool commands that disable or uninstall the agent.