2.6
Faible
CVE-2021-3049 An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated…
Description
An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with investigation read permissions to download files from incident investigations of which they are aware but are not a part of. This issue impacts: All Cortex XSOAR 5.5.0 builds; Cortex XSOAR 6.1.0 builds earlier than 12099345. This issue does not impact Cortex XSOAR 6.2.0 versions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cortex XSOAR 6.1 | 6.1.0 → < 12099345 | 12099345 |
Références
- security.paloaltonetworks.com security.paloaltonetworks.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cortex XSOAR
Les 11 CVE de Cortex XSOAR →
CVE-2026-0270
A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an…
4.8
Moyenne
CVE-2024-9470
A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view…
5.3
Moyenne
CVE-2023-3282
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a…
6.4
Moyenne
CVE-2023-0003
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user…
6.5
Moyenne