8.1
Élevée
CVE-2021-3051 An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that…
Description
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSOAR server. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 1578677; Cortex XSOAR 6.0.2 builds earlier than 1576452; Cortex XSOAR 6.1.0 builds earlier than 1578663; Cortex XSOAR 6.2.0 builds earlier than 1578666. All Cortex XSOAR instances hosted by Palo Alto Networks are protected from this vulnerability; no additional action is required for these instances.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cortex XSOAR 6.2 | 6.2.0 → < 1578666 | 1578666 |
| Cortex XSOAR 6.1 | 6.1.0 → < 1578663 | 1578663 |
| Cortex XSOAR 6.0 | 6.0.2 → < 1576452 | 1576452 |
| Cortex XSOAR 5.5 | 5.5.0 → < 1578677 | 1578677 |
Autres CVE de Cortex XSOAR
Les 11 CVE de Cortex XSOAR →
CVE-2026-0270
A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an…
4.8
Moyenne
CVE-2024-9470
A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view…
5.3
Moyenne
CVE-2023-3282
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a…
6.4
Moyenne
CVE-2023-0003
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user…
6.5
Moyenne