Skip to main content

Expected Behavior Violation

CVE-2024-8690

Medium
5.6/10

Summary

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.

  • LOW
  • LOCAL
  • NONE
  • UNCHANGED
  • NONE
  • HIGH
  • NONE
  • HIGH

CWE-440 - Expected Behavior Violation

A feature, API, or function does not perform according to its specification.

References

Advisory Timeline

  • Published