CVE-2021-3051

paloaltonetworks cortex xsoar

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-3051

Katalog CVE

CVSS 8.1 · High EPSS 0,58%

Kerentanan Improper Verification of Cryptographic Signature pada paloaltonetworks cortex xsoar. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSOAR server. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 1578677; Cortex XSOAR 6.0.2 builds earlier than 1576452; Cortex XSOAR 6.1.0 builds earlier than 1578663; Cortex XSOAR 6.2.0 builds earlier than 1578666. All Cortex XSOAR instances hosted by Palo Alto Networks are protected from this vulnerability; no additional action is required for these instances.

Rincian

Terbit di NVD
8 September 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-347: Improper Verification of Cryptographic Signature
EPSS (30 hari)
0,58% peluang dieksploitasi; lebih tinggi dari 46,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
paloaltonetworks cortex xsoar Versi 5.5.0
paloaltonetworks cortex xsoar Versi 5.5.0 70066
paloaltonetworks cortex xsoar Versi 5.5.0 73387
paloaltonetworks cortex xsoar Versi 5.5.0 75211
paloaltonetworks cortex xsoar Versi 5.5.0 78518
paloaltonetworks cortex xsoar Versi 5.5.0 94592
paloaltonetworks cortex xsoar Versi 6.0.2
paloaltonetworks cortex xsoar Versi 6.0.2 90947
paloaltonetworks cortex xsoar Versi 6.0.2 93351
paloaltonetworks cortex xsoar Versi 6.0.2 94597
paloaltonetworks cortex xsoar Versi 6.0.2 97682
paloaltonetworks cortex xsoar Versi 6.1.0
paloaltonetworks cortex xsoar Versi 6.1.0 1016923
paloaltonetworks cortex xsoar Versi 6.1.0 1031903
paloaltonetworks cortex xsoar Versi 6.1.0 1077664
paloaltonetworks cortex xsoar Versi 6.1.0 1209934
paloaltonetworks cortex xsoar Versi 6.1.0 1271079
paloaltonetworks cortex xsoar Versi 6.1.0 848144
paloaltonetworks cortex xsoar Versi 6.2.0
paloaltonetworks cortex xsoar Versi 6.2.0 1271082
paloaltonetworks cortex xsoar Versi 6.2.0 1321594
paloaltonetworks cortex xsoar Versi 6.2.0 1473927

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.