Addressed Issues - Cortex XSOAR 6.13 addressed issues. - Release Notes - 6.13 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Release Notes

Product
Cortex XSOAR
Version
6.13
Creation date
2024-04-15
Last date published
2026-02-04
Category
Release Notes
Abstract

Cortex XSOAR 6.13 addressed issues.

These issues are fixed in the Cortex XSOAR 6.13 release.

Category

Description

APIs

  • When running the Core REST API command to delete file entries, an error was generated.

  • An invalid API master key caused an error to appear in logs and a few hosts to randomly disconnect.

General

  • After upgrading from Cortex XSOAR 6.10 to 6.12, the Settings page did not load and an error appeared.

  • The Cortex XSOAR server restarted unexpectedly.

  • A mandatory markdown field could not be updated or saved if its initial value was empty.

Incidents

  • Certain authenticated but unauthorized users could access restricted incident data through a specific command.

  • Users creating an incident were able to access it even though their role was not assigned to it.

  • When searching for incidents using the Triage SLA field, inaccurate results were returned.

  • In some cases, preprocess rules were not editable or able to be reordered.

Integrations

  • When configuring long running integrations, Cortex XSOAR did not fetch 3rd party credentials, and populate them in the configured instance.

  • When creating an integration instance that fetches credentials, if the integration instance failed while fetching the credentials, the following error was displayed when trying to access the Credentials tab:

    "Couldn't transform result content to credentials sets (66)"

Jobs

When running a nightly job in Cortex XSOAR, the job ran twice when daylight saving time began and when daylight savings time ended.

Multi-tenant

  • Users deleted in the Main account were not deleted correctly in one of the child tenants.

  • Using propagation labels to remove content from tenants, sometimes did not completely remove the content.

  • Child investigation roles were not updated correctly.

Playbooks

  • Files generated when running playbooks in edit mode could not be accessed or downloaded.

  • When creating a playbook and using a variable such as ${incident.name} in the Message body field of a Conditional Ask task, the variable was not resolved and the variable name was displayed in the incident.

Remote Repositories

When trying to push content from dev to prod and there was a conflict, such as an incident field of a different type, there was no content installation conflict message displayed, and the existing content on prod remained.

Reports

  • The reference line created in the Widget Builder in the graph section did not appear when generating a report.

  • When exporting CSV reports from Cortex XSOAR and opening them in Excel, the Hebrew text was not automatically readable.

  • When generating a report of type Line, the chart was generated in UTC, regardless of the reports.time.zone setting.

Scripts

When running an incident post-processing script to stop a timer, the built-in incident closure process caused the post-processing script to execute twice.