Aller au contenu
en Se connecter
5.1 Moyenne

CVE-2021-3034 An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured…

Description

An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the private key and identity provider certificate used to configure the SAML SSO integration. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 98622; Cortex XSOAR 6.0.1 builds earlier than 830029; Cortex XSOAR 6.0.2 builds earlier than 98623; Cortex XSOAR 6.1.0 builds earlier than 848144.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cortex XSOAR 6.1 6.1.0 → < 848144 848144
Cortex XSOAR 6.0 6.0.1 → < 830029 98623
Cortex XSOAR 5.5 5.5.0 → < 98622 98622

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cortex XSOAR

Les 11 CVE de Cortex XSOAR →
CVE-2026-0270 A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an… 4.8 Moyenne CVE-2024-9470 A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view… 5.3 Moyenne CVE-2023-3282 A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a… 6.4 Moyenne CVE-2023-0003 A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user… 6.5 Moyenne
Suivre cette CVE