Skip to content
fr Sign in
5.1 Medium

CVE-2021-3034 An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured…

Description

An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the private key and identity provider certificate used to configure the SAML SSO integration. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 98622; Cortex XSOAR 6.0.1 builds earlier than 830029; Cortex XSOAR 6.0.2 builds earlier than 98623; Cortex XSOAR 6.1.0 builds earlier than 848144.

Affected products and versions

Product Affected versions Fixed in
Cortex XSOAR 6.1 6.1.0 → < 848144 848144
Cortex XSOAR 6.0 6.0.1 → < 830029 98623
Cortex XSOAR 5.5 5.5.0 → < 98622 98622

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cortex XSOAR

The 11 CVEs of Cortex XSOAR →
CVE-2026-0270 A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an… 4.8 Medium CVE-2024-9470 A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view… 5.3 Medium CVE-2023-3282 A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a… 6.4 Medium CVE-2023-0003 A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user… 6.5 Medium
Track this CVE