CVE-2020-2020: Cortex XDR Agent: Exceptional condition denial-of-service (DoS)
An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the software's internal program directory that prevents the Cortex XDR Agent from starting. The exceptional condition is persistent and prevents Cortex XDR Agent from starting when the software or machine is restarted. This issue impacts: Cortex XDR Agent 5.0 versions earlier than 5.0.10; Cortex XDR Agent 6.1 versions earlier than 6.1.7; Cortex XDR Agent 7.0 versions earlier than 7.0.3; Cortex XDR Agent 7.1 versions earlier than 7.1.2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2020-2020?
CVE-2020-2020 has been assigned a medium severity rating due to its potential impact on the functionality of the Cortex XDR Agent.
How do I fix CVE-2020-2020?
To fix CVE-2020-2020, ensure that your Cortex XDR Agent is updated to the latest version that addresses this vulnerability.
Who is affected by CVE-2020-2020?
CVE-2020-2020 affects local authenticated Windows users of the Palo Alto Networks Cortex XDR Agent versions between 5.0 and 7.1.2.
What is the impact of CVE-2020-2020 on the Cortex XDR Agent?
CVE-2020-2020 allows a user to create files in the Cortex XDR Agent's internal program directory, inhibiting the agent's ability to start.
Is there a workaround for CVE-2020-2020?
Currently, applying the necessary updates to the affected version of the Cortex XDR Agent is recommended as the primary method of remediation for CVE-2020-2020.