« Volver al listado

CVE-2021-3049

Estado: ModificadaMedia (4.3)—

An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with investigation read permissions to download files from incident investigations of which they are aware but are not a part of. This issue impacts: All Cortex XSOAR 5.5.0 builds; Cortex XSOAR 6.1.0 builds earlier than 12099345. This issue does not impact Cortex XSOAR 6.2.0 versions.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Paloaltonetworks — Cortex Xsoar

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-3049",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@paloaltonetworks.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 2.6,
          "attackVector": "NETWORK",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 1.2
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@paloaltonetworks.com",
      "affectedData": [
        {
          "vendor": "Palo Alto Networks",
          "product": "Cortex XSOAR",
          "versions": [
            {
              "status": "affected",
              "version": "5.5.0 all"
            },
            {
              "status": "unaffected",
              "version": "6.2.0 all"
            },
            {
              "status": "affected",
              "changes": [
                {
                  "at": "12099345",
                  "status": "unaffected"
                }
              ],
              "version": "6.1.0",
              "lessThan": "12099345",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-09-08T17:15:11.423",
  "references": [
    {
      "url": "https://security.paloaltonetworks.com/CVE-2021-3049",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@paloaltonetworks.com"
    },
    {
      "url": "https://security.paloaltonetworks.com/CVE-2021-3049",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@paloaltonetworks.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-285"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with investigation read permissions to download files from incident investigations of which they are aware but are not a part of. This issue impacts: All Cortex XSOAR 5.5.0 builds; Cortex XSOAR 6.1.0 builds earlier than 12099345. This issue does not impact Cortex XSOAR 6.2.0 versions."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de autorización inapropiada en el servidor Cortex XSOAR de Palo Alto Networks permite a un atacante autenticado basado en la red con permisos de lectura de investigación descargar archivos de investigaciones de incidentes de los que presenta conocimiento pero no forma parte. Este problema afecta: Todas las builds de Cortex XSOAR 5.5.0; las builds de Cortex XSOAR 6.1.0 anteriores a 12099345. Este problema no afecta a las versiones de Cortex XSOAR 6.2.0"
    }
  ],
  "lastModified": "2026-06-17T04:04:37.977",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0513C590-B393-45B9-BD95-14F09A33A6FB"
            },
            {
              "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:70066:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCC73F19-BAEC-464E-813E-AABFB0FF1749"
            },
            {
              "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:73387:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "829FDD7F-9F92-4425-BA03-7A916C672A1A"
            },
            {
              "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:75211:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01F6E4B3-7264-4B6B-A2E0-EC0C6E454FE9"
            },
            {
              "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:78518:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BFF634F2-427F-46AF-A203-3F8F91AEB039"
            },
            {
              "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:94592:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1B47446-7E43-44ED-A734-4C300ED6F6CC"
            },
            {
              "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA3AD87F-BF18-48A2-8344-197185D974B0"
            },
            {
              "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1016923:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3462449-36BD-4FB6-BB40-B06F0EDE570A"
            },
            {
              "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1031903:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5ED03A42-9D5F-4347-BA8D-DA1B5D5C771A"
            },
            {
              "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1077664:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41C31238-7B7A-4057-867B-B3A35690A77A"
            },
            {
              "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:848144:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6CE8BB23-1EEA-41EF-BEC5-EAC5DE7F095F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@paloaltonetworks.com"
}