Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then use to execute privileged cytool commands that disable or uninstall the agent.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
3/ Between 2018-2023, BEC incidents quadrupled. Notably, CVE-2023-0001 highlights vulnerabilities in email protocols that can be exploited for spoofing. #ThreatIntel #BEC
Post summary
The post notes a rise in BEC incidents and references CVE‑2023‑0001, indicating it involves email protocol spoofing vulnerabilities, but lacks details on PoCs, exploits, patches, or active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows | - | - | - |
| App | paloaltonetworks | cortex_xdr_agent | - | - | - |