9.1
Critical
CVE-2021-3033 An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud…
Description
An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud Compute console. This vulnerability enables an attacker to bypass signature validation during SAML authentication by logging in to the Prisma Cloud Compute console as any authorized user. This issue impacts: All versions of Prisma Cloud Compute 19.11, Prisma Cloud Compute 20.04, and Prisma Cloud Compute 20.09; Prisma Cloud Compute 20.12 before update 1. Prisma Cloud Compute SaaS version is not impacted by this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Prisma Cloud Compute 20.12 | 20.12 → latest | No fix stated |
| Prisma Cloud Compute 20.09 | 20.09 → latest | No fix stated |
| Prisma Cloud Compute 20.04 | 20.04 → latest | No fix stated |
| Prisma Cloud Compute 19.11 | 19.11 → latest | No fix stated |
Other CVEs of Prisma Cloud Compute
The 4 CVEs of Prisma Cloud Compute →
CVE-2024-5906
A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious…
4.8
Medium
CVE-2021-3043
A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a…
7.5
High
CVE-2021-3039
An information exposure through log file vulnerability exists in the Palo Alto Networks Prisma Cloud Compute Console…
3.8
Low