[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdXM31zEf2b8-gQ86ErpFsR_zc2p1P1w2L2IF-pIqN1s":3,"g5a-risk:CVE-2024-5909":125},{"success":4,"data":5,"meta":122},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":29,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":55,"references":56,"referencesCount":64,"weaknesses":65,"weaknessesCount":55,"isActivelyExploited":74,"cisaInfo":29,"otxData":29,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":120,"notableEvents":121},"CVE-2024-5909","What is CVE-2024-5909?","A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.","A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the...","2024-06-12T17:15:53.37","2026-06-17T08:16:53.427",6.8,"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:N\u002FR:U\u002FV:D\u002FRE:M\u002FU:Amber",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":34},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","LOCAL","LOW","NONE","UNCHANGED","HIGH",5.5,"MEDIUM",null,1.8,3.6,[],[],[35],{"Source":36,"Type":37,"CVSSData":38},"psirt@paloaltonetworks.com","Secondary",{"Version":39,"VectorString":13,"BaseScore":12,"BaseSeverity":28,"AttackVector":22,"AttackComplexity":23,"AttackRequirements":24,"PrivilegesRequired":23,"UserInteraction":24,"VulnConfidentialityImpact":24,"VulnIntegrityImpact":24,"VulnAvailabilityImpact":26,"SubConfidentialityImpact":24,"SubIntegrityImpact":24,"SubAvailabilityImpact":24,"ExploitMaturity":40,"ConfidentialityRequirement":40,"IntegrityRequirement":40,"AvailabilityRequirement":40,"ModifiedAttackVector":40,"ModifiedAttackComplexity":40,"ModifiedAttackRequirements":40,"ModifiedPrivilegesRequired":40,"ModifiedUserInteraction":40,"ModifiedVulnConfidentialityImpact":40,"ModifiedVulnIntegrityImpact":40,"ModifiedVulnAvailabilityImpact":40,"ModifiedSubConfidentialityImpact":40,"ModifiedSubIntegrityImpact":40,"ModifiedSubAvailabilityImpact":40,"Safety":40,"Automatable":41,"Recovery":42,"ValueDensity":43,"VulnerabilityResponseEffort":44,"ProviderUrgency":45},"4.0","NOT_DEFINED","NO","USER","DIFFUSE","MODERATE","AMBER",0.0041,[46,46,46,46,46,46,46],"Medium",[50],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"paloaltonetworks","cortex_xdr_agent","*","cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:critical_environment:windows:*:*",1,[57,62],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fsecurity.paloaltonetworks.com\u002FCVE-2024-5909","Paloaltonetworks",[61],"Vendor Advisory",{"url":58,"source":59,"tags":63},[61],2,[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2024-5909? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-5909, a medium severity cyber security vulnerability from 2024. A problem with a protection mechanism in the Palo Alto Net...","CVE-2024-5909, CVE-2024-5909 vulnerability, CVE-2024-5909 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, paloaltonetworks security, cortex_xdr_agent vulnerability","\u002Fwhat-is\u002Fcve-2024-5909",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-5909","Cybersecurity","CVE-2024-5909, CVE-2024-5909 vulnerability, CVE-2024-5909 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":29,"Negate":29,"Nodes":103},[104],{"Operator":105,"Negate":74,"CPEMatch":106},"OR",[107,111,116],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":108,"VersionStartExcluding":29,"VersionStartIncluding":109,"VersionEndExcluding":110,"VersionEndIncluding":29},"76F416A4-2527-4B52-BBED-FF648B8209B0","7.9","7.9.102",{"Vulnerable":4,"Criteria":112,"MatchCriteriaID":113,"VersionStartExcluding":29,"VersionStartIncluding":114,"VersionEndExcluding":115,"VersionEndIncluding":29},"cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:*:*:*:*:*:windows:*:*","8E20EA13-B11E-4578-8DB1-AEBC51EAD4E1","8.1","8.1.2",{"Vulnerable":4,"Criteria":112,"MatchCriteriaID":117,"VersionStartExcluding":29,"VersionStartIncluding":118,"VersionEndExcluding":119,"VersionEndIncluding":29},"E60C3C3C-01B8-4A72-B4B6-89BB374BBBB9","8.2","8.2.1",[],[],{"lastModified":11,"cacheTime":123,"version":124},1792237705608,"2.0",{"score":126,"band":127,"action":128,"scoredAt":129},17,"Info","Track","2026-10-16T07:02:48.694182+00:00"]