9.1
Critique
CVE-2021-3033 An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud…
Description
An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud Compute console. This vulnerability enables an attacker to bypass signature validation during SAML authentication by logging in to the Prisma Cloud Compute console as any authorized user. This issue impacts: All versions of Prisma Cloud Compute 19.11, Prisma Cloud Compute 20.04, and Prisma Cloud Compute 20.09; Prisma Cloud Compute 20.12 before update 1. Prisma Cloud Compute SaaS version is not impacted by this vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Prisma Cloud Compute 20.12 | 20.12 → dernières | Pas de correctif indiqué |
| Prisma Cloud Compute 20.09 | 20.09 → dernières | Pas de correctif indiqué |
| Prisma Cloud Compute 20.04 | 20.04 → dernières | Pas de correctif indiqué |
| Prisma Cloud Compute 19.11 | 19.11 → dernières | Pas de correctif indiqué |
Autres CVE de Prisma Cloud Compute
Les 4 CVE de Prisma Cloud Compute →
CVE-2024-5906
A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious…
4.8
Moyenne
CVE-2021-3043
A reflected cross-site scripting (XSS) vulnerability exists in the Prisma Cloud Compute web console that enables a…
7.5
Élevée
CVE-2021-3039
An information exposure through log file vulnerability exists in the Palo Alto Networks Prisma Cloud Compute Console…
3.8
Faible