March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – AZORult Active-IOCs
July 15, 2021
Rewterz Threat Advisory – Mass Scanning Detected on Fortinet VPN Servers
July 15, 2021
Rewterz Threat Alert – AZORult Active-IOCs
July 15, 2021
Rewterz Threat Advisory – Mass Scanning Detected on Fortinet VPN Servers
July 15, 2021
Severity
High
Analysis Summary
CVE-2021-3043
A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console while an authenticated administrator is using that web interface.
CVE-2021-3042
A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute programs with SYSTEM privileges.
Impact
- Cross-site scripting
- Code Execution
Affected Vendors
Palo Alto
Affected Products
- Cortex XDR agent 6.1 without content update 181 or a later version
- Cortex XDR agent 7.2 without content update 181 or a later version
- Cortex XDR agent 7.3 without content update 181 or a later version
Remediation
Refer to vendor advisory for the complete list of affected products and their respective patches.