CVE-2021-3034

🗓️ 10 Mar 2021 18:10:13Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 61 Views🌐 WEB

Cortex XSOAR software exposes SAML SSO secrets in server logs

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2021-3034	10 Mar 202120:53	–	circl
CNNVD	Palo Alto Cortex XSOAR 日志信息泄露漏洞	10 Mar 202100:00	–	cnnvd
Cvelist	CVE-2021-3034 Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs	10 Mar 202118:10	–	cvelist
EUVD	EUVD-2021-26386	7 Oct 202500:30	–	euvd
NVD	CVE-2021-3034	10 Mar 202118:15	–	nvd
OSV	CVE-2021-3034	10 Mar 202118:15	–	osv
Palo Alto Networks	Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs	10 Mar 202117:00	–	paloalto
Prion	Design/Logic Flaw	10 Mar 202118:15	–	prion

NVD

Vulners

Node

paloaltonetworks cortex_xsoarMatch5.5.0

paloaltonetworks cortex_xsoarMatch5.5.070066

paloaltonetworks cortex_xsoarMatch5.5.073387

paloaltonetworks cortex_xsoarMatch5.5.075211

paloaltonetworks cortex_xsoarMatch5.5.078518

paloaltonetworks cortex_xsoarMatch5.5.094592

paloaltonetworks cortex_xsoarMatch6.0.1

paloaltonetworks cortex_xsoarMatch6.0.181077

paloaltonetworks cortex_xsoarMatch6.0.2

paloaltonetworks cortex_xsoarMatch6.0.290947

paloaltonetworks cortex_xsoarMatch6.0.293351

paloaltonetworks cortex_xsoarMatch6.0.294597

paloaltonetworks cortex_xsoarMatch6.0.297682

paloaltonetworks cortex_xsoarMatch6.1.0

[
  {
    "product": "Cortex XSOAR",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "98622",
            "status": "unaffected"
          }
        ],
        "lessThan": "98622",
        "status": "affected",
        "version": "5.5.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "98623",
            "status": "unaffected"
          }
        ],
        "lessThan": "98623",
        "status": "affected",
        "version": "6.0.2",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "830029",
            "status": "unaffected"
          }
        ],
        "lessThan": "830029",
        "status": "affected",
        "version": "6.0.1",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "848144",
            "status": "unaffected"
          }
        ],
        "lessThan": "848144",
        "status": "affected",
        "version": "6.1.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2021-3034

Parameter	Position	Path	Description	CWE
private_key	path	/var/log/demisto/	Information exposure via log files; secrets used for SAML SSO are logged.	CWE-532
idp_certificate	path	/var/log/demisto/	Information exposure via log files; secrets used for SAML SSO are logged.	CWE-532

17 Jun 2026 04:04Current

5Medium risk

Vulners AI Score5

CVSS 23.6

CVSS 3.15.1

EPSS0.00168

CWE-532