Cortex XSOAR: Authentication Bypass in SAML Authentication

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSOAR server.

Work around:
To completely prevent this issue from being exploited before you can upgrade your Cortex XSOAR server, disable SAML authentication integration.

You can also restrict network access to the Cortex XSOAR server to allow only trusted users to further reduce the impact of this issue.