CVE-2021-3051

Description

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSOAR server. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 1578677; Cortex XSOAR 6.0.2 builds earlier than 1576452; Cortex XSOAR 6.1.0 builds earlier than 1578663; Cortex XSOAR 6.2.0 builds earlier than 1578666. All Cortex XSOAR instances hosted by Palo Alto Networks are protected from this vulnerability; no additional action is required for these instances.

Overview

State

—

Assigner (CNA)

—

CVSS severity

MEDIUM

CVSS score

5.0 / 10

CVSS vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Effective score

5.0 / 10 MEDIUM source: CNA overview

CWE(s)

—

Reserved

—

Published

2021-05-19 00:00 UTC

Last updated

—

Source

https://www.rapid7.com/db/vulnerabilities/debian-cve-2021-3051/

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published

2021-09-08 17:15:11 UTC

NVD last modified

2026-06-17 04:04:38 UTC

NVD CVSS v3.1

8.1 / 10 HIGH source: psirt@paloaltonetworks.com

NVD CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability subscore

2.2 / 10

Impact subscore

5.9 / 10

EPSS score

0.0056 (probability of exploitation in next 30 days)

EPSS percentile

42.54% vs all CVEs — higher = more likely to be exploited, as of 2026-06-29

NVD-assigned CWE(s): CWE-347 (differs from the CNA list above)

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID

EUVD-2021-26403

Assigner

palo_alto

Published

Sep 8, 2021, 5:10:16 PM

Updated

Sep 17, 2024, 1:10:46 AM

EUVD base score (CVSS 3.1)

8.1 / 10
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EUVD-reported EPSS

0.5600

Vendors

Palo Alto Networks

Products

Cortex XSOAR (6.1.0 <1578663)

Cortex XSOAR (6.0.2 <1576452)

Cortex XSOAR (5.5.0 <1578677)

Cortex XSOAR (6.2.0 <1578666)

Aliases

GHSA-4qfq-vjf3-59qg

ENISA description: An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSOAR server. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 1578677; Cortex XSOAR 6.0.2 builds earlier than 1576452; Cortex XSOAR 6.1.0 builds earlier than 1578663; Cortex XSOAR 6.2.0 builds earlier than 1578666. All Cortex XSOAR instances hosted by Palo Alto Networks are protected from this vulnerability; no additional action is required for these instances.

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

MITRE references (1) cveawg.mitre.org

Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.

• https://security.paloaltonetworks.com/CVE-2021-3051 x_refsource_MISC

Web references (4)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

• http://cwe.mitre.org/data/definitions/347.html rapid7:cwe.mitre.org
• https://attackerkb.com/topics/CVE-2021-3051 rapid7:attackerkb.com
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-26403 rapid7:euvd.enisa.europa.eu
• https://www.cve.org/CVERecord?id=CVE-2021-3051 rapid7:www.cve.org

• Rapid7 — Solution
  rapid7

  debian-upgrade-chromium

  2026-05-29 02:38 UTC

Only Available for Registered Users. Sign in to view.