8.1
High
CVE-2021-3051 An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that…
Description
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSOAR server. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 1578677; Cortex XSOAR 6.0.2 builds earlier than 1576452; Cortex XSOAR 6.1.0 builds earlier than 1578663; Cortex XSOAR 6.2.0 builds earlier than 1578666. All Cortex XSOAR instances hosted by Palo Alto Networks are protected from this vulnerability; no additional action is required for these instances.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cortex XSOAR 6.2 | 6.2.0 → < 1578666 | 1578666 |
| Cortex XSOAR 6.1 | 6.1.0 → < 1578663 | 1578663 |
| Cortex XSOAR 6.0 | 6.0.2 → < 1576452 | 1576452 |
| Cortex XSOAR 5.5 | 5.5.0 → < 1578677 | 1578677 |
Other CVEs of Cortex XSOAR
The 11 CVEs of Cortex XSOAR →
CVE-2026-0270
A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an…
4.8
Medium
CVE-2024-9470
A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view…
5.3
Medium
CVE-2023-3282
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a…
6.4
Medium
CVE-2023-0003
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user…
6.5
Medium