CVE-2021-3044 Cortex XSOAR: Unauthorized Usage of the REST API

2021-06-2200:00:00

CWE-285

palo_alto

www.cve.org

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.2%

JSON

An improper authorization vulnerability in Palo Alto Networks Cortex XSOAR enables a remote unauthenticated attacker with network access to the Cortex XSOAR server to perform unauthorized actions through the REST API. This issue impacts: Cortex XSOAR 6.1.0 builds later than 1016923 and earlier than 1271064; Cortex XSOAR 6.2.0 builds earlier than 1271065. This issue does not impact Cortex XSOAR 5.5.0, Cortex XSOAR 6.0.0, Cortex XSOAR 6.0.1, or Cortex XSOAR 6.0.2 versions. All Cortex XSOAR instances hosted by Palo Alto Networks are upgraded to resolve this vulnerability. No additional action is required for these instances.

CNA Affected

[
  {
    "product": "Cortex XSOAR",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "5.5.0 all"
      },
      {
        "status": "unaffected",
        "version": "6.0.0 all"
      },
      {
        "status": "unaffected",
        "version": "6.0.1 all"
      },
      {
        "status": "unaffected",
        "version": "6.0.2 all"
      },
      {
        "changes": [
          {
            "at": "1271064",
            "status": "unaffected"
          },
          {
            "at": "1016923",
            "status": "affected"
          }
        ],
        "lessThan": "6.1.0*",
        "status": "affected",
        "version": "1016923",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "1271065",
            "status": "unaffected"
          }
        ],
        "lessThan": "1271065",
        "status": "affected",
        "version": "6.2.0",
        "versionType": "custom"
      }
    ]
  }
]