CVE-2021-3049Low

CVE-2021-3049 Cortex XSOAR: Improper Authorization of Incident Investigations Vulnerability

Published
September 8, 2021
Last Modified
September 8, 2021

🔗 CVE IDs covered (1)

CVE-2021-3049 →

📋 Description

An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with investigation read permissions to download files from incident investigations of which they are aware but are not a part of.

This issue impacts: All Cortex XSOAR 5.5.0 builds; Cortex XSOAR 6.1.0 builds earlier than 12099345. This issue does not impact Cortex XSOAR 6.2.0 versions.

🎯 Affected products1

  • Cortex XSOAR

✅ Remediation

This issue is fixed in Cortex XSOAR 6.1.0 build 12099345 and all later Cortex XSOAR versions. There are currently no Cortex XSOAR 5.5.0 updates available for this issue. Workarounds and mitigations: There are no known workarounds for this issue.

🔗 References (1)