An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks Traps 5.0 versions before 5.0.8; 6.1 versions before 6.1.4 on Windows. This issue does not affect Cortex XDR 7.0. This issue does not affect Traps for Linux or MacOS.
Creating and using insecure temporary files can leave application and system data vulnerable to attack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Traps | Paloaltonetworks | 5.0 (including) | 5.0.8 (excluding) |
| Traps | Paloaltonetworks | 6.1 (including) | 6.1.4 (excluding) |