CVE-2021-3049

Published: Sep 8, 2021Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with investigation read permissions to download files from incident investigations of which they are aware but are not a part of. This issue impacts: All Cortex XSOAR 5.5.0 builds; Cortex XSOAR 6.1.0 builds earlier than 12099345. This issue does not impact Cortex XSOAR 6.2.0 versions.

Affected (11)

Products: Paloaltonetworks: Cortex Xsoar

Paloaltonetworks

1 product

Cortex Xsoar

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Cortex Xsoar	Version 5.5.0
Paloaltonetworks Cortex Xsoar	Version 5.5.0 70066
Paloaltonetworks Cortex Xsoar	Version 5.5.0 73387
Paloaltonetworks Cortex Xsoar	Version 5.5.0 75211
Paloaltonetworks Cortex Xsoar	Version 5.5.0 78518
Paloaltonetworks Cortex Xsoar	Version 5.5.0 94592
Paloaltonetworks Cortex Xsoar	Version 6.1.0
Paloaltonetworks Cortex Xsoar	Version 6.1.0 1016923
Paloaltonetworks Cortex Xsoar	Version 6.1.0 1031903
Paloaltonetworks Cortex Xsoar	Version 6.1.0 1077664
Paloaltonetworks Cortex Xsoar	Version 6.1.0 848144

Related CWEs

CWE-285

Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://security.paloaltonetworks.com/CVE-2021-3049

Source: psirt@paloaltonetworks.com

Vendor Advisory

https://security.paloaltonetworks.com/CVE-2021-3049

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.