CVE-2022-0027 is an improper authorization vulnerability affecting Palo Alto Networks Cortex XSOAR versions 6.1, 6.2, 6.5, and 6.6 prior to build 6.6.0.2585049. Authenticated users in non-Read-Only groups can generate email reports containing summary information for all incidents, even those they lack direct access to. Rated as Medium severity with a CVSS score of 4.3, this vulnerability has a low attack complexity and requires local user privileges, potentially leading to unauthorized disclosure of sensitive incident data. The impact is limited to confidentiality, as it does not affect integrity or availability. There is no evidence of active exploitation, nor is exploit code publicly available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.6.0, < 6.6.0.2585049CPE matchmatch criteria | cpe:2.3:a:paloaltonetworks:cortex_xsoar:*:*:*:*:*:*:*:* | ||
6.1.0CPE matchmatch criteria | cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:-:*:*:*:*:*:* | ||
6.2.0CPE matchmatch criteria | cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:-:*:*:*:*:*:* | ||
6.5.0CPE matchmatch criteria | cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.5.0:-:*:*:*:*:*:* | ||
>= 6.6, < 6.6.0.2585049CPE match | cpe:2.3:a:paloaltonetworks:cortex_xsoar:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.