CVE-2021-3046

🗓️ 11 Aug 2021 17:10:16Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 48 Views

CVE-2021-3046: Improper authentication vulnerability in Palo Alto Networks PAN-OS software

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-3046	11 Aug 202120:50	–	circl
CNNVD	Palo Alto Networks PAN-OS 授权问题漏洞	11 Aug 202100:00	–	cnnvd
Cvelist	CVE-2021-3046 PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal	11 Aug 202117:10	–	cvelist
EUVD	EUVD-2021-26398	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in PAN-OS	12 Aug 202100:00	–	ncsc
NVD	CVE-2021-3046	11 Aug 202117:15	–	nvd
OSV	CVE-2021-3046	11 Aug 202117:15	–	osv
Palo Alto Networks	PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal	11 Aug 202116:00	–	paloalto
Tenable Nessus	Palo Alto Networks PAN-OS 8.1.x < 8.1.19 / 9.0.x < 9.0.14 / 9.1.x < 9.1.9 / 10.0.x < 10.0.5 Vulnerability	11 Aug 202100:00	–	nessus
Prion	Authentication flaw	11 Aug 202117:15	–	prion

NVD

Vulners

Node

paloaltonetworks pan-osRange8.1.0–8.1.19

paloaltonetworks pan-osRange9.0.0–9.0.14

paloaltonetworks pan-osRange9.1.0–9.1.9

paloaltonetworks pan-osRange10.0.0–10.0.5

[
  {
    "product": "PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "10.1.*"
      },
      {
        "changes": [
          {
            "at": "8.1.19",
            "status": "unaffected"
          }
        ],
        "lessThan": "8.1.19",
        "status": "affected",
        "version": "8.1",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "9.0.14",
            "status": "unaffected"
          }
        ],
        "lessThan": "9.0.14",
        "status": "affected",
        "version": "9.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "9.1.9",
            "status": "unaffected"
          }
        ],
        "lessThan": "9.1.9",
        "status": "affected",
        "version": "9.1",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "10.0.5",
            "status": "unaffected"
          }
        ],
        "lessThan": "10.0.5",
        "status": "affected",
        "version": "10.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2021-3046

21 Nov 2024 06:20Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

CVSS 3.16.5 - 6.8

EPSS0.0025

CWE-287