CVE-2021-3049

CVE-2021-3049 affects Palo Alto Networks Cortex XSOAR server. The issue is an improper authorization that lets an authenticated attacker with investigation read permissions download files from incident investigations they are aware of but not part of. Affected: Cortex XSOAR 5.5.0 and 6.1.0 (befor...