CVE-2024-9470: 
Cortex XSOAR vulnerability analysis and mitigation

A vulnerability in Cortex XSOAR (CVE-2024-9470) allows unauthorized disclosure of incident data to users who lack the appropriate viewing privileges. The vulnerability was discovered by Bobby Roos of Kyndryl CSIRT and was publicly disclosed on October 9, 2024. This issue affects Cortex XSOAR versions prior to 6.12.0 (Build 1271551) (Palo Alto Advisory).

The vulnerability has been assigned a CVSS v4.0 base score of 5.3 (MEDIUM), with the following characteristics: network-based attack vector, low attack complexity, no attack requirements, and low privileges required. The vulnerability is classified under CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere (Palo Alto Advisory).

When exploited, this vulnerability can lead to the unauthorized disclosure of incident data, potentially exposing sensitive information to users who should not have access to it. The confidentiality impact is rated as LOW, while integrity and availability impacts are rated as NONE (Palo Alto Advisory).

As of the disclosure date, Palo Alto Networks has stated they are not aware of any malicious exploitation of this vulnerability in the wild (Palo Alto Advisory).

The vulnerability has been fixed in Cortex XSOAR version 6.12.0 (Build 1271551) and all later versions. Users are advised to upgrade to the patched version to mitigate this security issue (Palo Alto Advisory).