Palo_altoCVELIST:CVE-2021-3049CVE-2021-3049 Cortex XSOAR: Improper Authorization of Incident Investigations Vulnerability
2.6 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
4.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
22.9%
An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with investigation read permissions to download files from incident investigations of which they are aware but are not a part of. This issue impacts: All Cortex XSOAR 5.5.0 builds; Cortex XSOAR 6.1.0 builds earlier than 12099345. This issue does not impact Cortex XSOAR 6.2.0 versions.
CNA Affected
[
{
"product": "Cortex XSOAR",
"vendor": "Palo Alto Networks",
"versions": [
{
"status": "affected",
"version": "5.5.0 all"
},
{
"status": "unaffected",
"version": "6.2.0 all"
},
{
"changes": [
{
"at": "12099345",
"status": "unaffected"
}
],
"lessThan": "12099345",
"status": "affected",
"version": "6.1.0",
"versionType": "custom"
}
]
}
]Related
2.6 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
4.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
22.9%