CVE-2021-3033

Published: Feb 10, 2021Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud Compute console. This vulnerability enables an attacker to bypass signature validation during SAML authentication by logging in to the Prisma Cloud Compute console as any authorized user. This issue impacts: All versions of Prisma Cloud Compute 19.11, Prisma Cloud Compute 20.04, and Prisma Cloud Compute 20.09; Prisma Cloud Compute 20.12 before update 1. Prisma Cloud Compute SaaS version is not impacted by this vulnerability.

Affected (10)

Products: Paloaltonetworks: Prisma Cloud

Paloaltonetworks

1 product

Prisma Cloud

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Prisma Cloud	Version 19.11
Paloaltonetworks Prisma Cloud	Version 19.11 update_1
Paloaltonetworks Prisma Cloud	Version 19.11 update_2
Paloaltonetworks Prisma Cloud	Version 20.04
Paloaltonetworks Prisma Cloud	Version 20.04 update_1
Paloaltonetworks Prisma Cloud	Version 20.04 update_2
Paloaltonetworks Prisma Cloud	Version 20.09
Paloaltonetworks Prisma Cloud	Version 20.09 update_1
Paloaltonetworks Prisma Cloud	Version 20.09 update_2
Paloaltonetworks Prisma Cloud	Version 20.12

Related CWEs

CWE-347

Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

References (2)

https://security.paloaltonetworks.com/CVE-2021-3033

Source: psirt@paloaltonetworks.com

Third Party Advisory

https://security.paloaltonetworks.com/CVE-2021-3033

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.