CVE-2024-8690 Vulnerability Details

  /     /     /  

CVE-2024-8690 Metadata Quick Info

CVE Published: 11/09/2024 | CVE Updated: 11/09/2024 | CVE Year: 2024
Source: palo_alto | Vendor: Palo Alto Networks | Product: Cortex XDR Agent
Status : PUBLISHED

---

CVE-2024-8690 Description

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-440
CWE Name: CWE-440: Expected Behavior Violation
Source: Palo Alto Networks

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID: CAPEC-554
CAPEC Description: CAPEC-554 Functionality Bypass


Source: NVD (National Vulnerability Database).