[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fO9vvG7c6V_S6ES89uuGor5DqWCI0UYshW9T9okZRWvs":3,"g5a-risk:CVE-2021-3051":177},{"success":4,"data":5,"meta":175},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":42,"epssPercentile":25,"epssTimeSeries":43,"severity":45,"affectedProducts":46,"affectedProductsCount":61,"references":62,"referencesCount":68,"weaknesses":69,"weaknessesCount":68,"isActivelyExploited":78,"cisaInfo":25,"otxData":25,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":173,"notableEvents":174},"CVE-2021-3051","What is CVE-2021-3051?","An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSOAR server. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 1578677; Cortex XSOAR 6.0.2 builds earlier than 1576452; Cortex XSOAR 6.1.0 builds earlier than 1578663; Cortex XSOAR 6.2.0 builds earlier than 1578666. All Cortex XSOAR instances hosted by Palo Alto Networks are protected from this vulnerability; no additional action is required for these instances.","An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based at...","2021-09-08T17:15:11.777","2021-09-17T14:47:49.12",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":32,"CVSSMetricV40":25},[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"psirt@paloaltonetworks.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[33],{"Source":17,"Type":18,"CVSSData":34,"BaseSeverity":37,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":35,"VectorString":36,"AccessVector":21,"AccessComplexity":37,"Authentication":23,"ConfidentialityImpact":38,"IntegrityImpact":38,"AvailabilityImpact":38,"BaseScore":39,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.00581,[44,44,42,42,42,42,42],0.00563,"High",[47,52,55,58],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"paloaltonetworks","cortex_xsoar","5.5.0","cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:-:*:*:*:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"6.0.2","cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.2:-:*:*:*:*:*:*",{"vendor":48,"product":49,"version":56,"criteria":57,"vulnerable":4},"6.1.0","cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:-:*:*:*:*:*:*",{"vendor":48,"product":49,"version":59,"criteria":60,"vulnerable":4},"6.2.0","cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:-:*:*:*:*:*:*",4,[63],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fsecurity.paloaltonetworks.com\u002FCVE-2021-3051","Paloaltonetworks",[67],"Vendor Advisory",1,[70],{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":76,"structure":77},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","","Draft","Base","Simple",false,[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2021-3051? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-3051, a high severity cyber security vulnerability from 2021. An improper verification of cryptographic signature vulnerab...","CVE-2021-3051, CVE-2021-3051 vulnerability, CVE-2021-3051 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, paloaltonetworks security, cortex_xsoar vulnerability","\u002Fwhat-is\u002Fcve-2021-3051",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-3051","Cybersecurity","CVE-2021-3051, CVE-2021-3051 vulnerability, CVE-2021-3051 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":25,"Negate":25,"Nodes":107},[108],{"Operator":109,"Negate":25,"CPEMatch":110},"OR",[111,113,116,119,122,125,128,130,133,136,139,142,144,147,150,153,156,159,162,164,167,170],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":112,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"0513C590-B393-45B9-BD95-14F09A33A6FB",{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":115,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:70066:*:*:*:*:*:*","CCC73F19-BAEC-464E-813E-AABFB0FF1749",{"Vulnerable":4,"Criteria":117,"MatchCriteriaID":118,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:73387:*:*:*:*:*:*","829FDD7F-9F92-4425-BA03-7A916C672A1A",{"Vulnerable":4,"Criteria":120,"MatchCriteriaID":121,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:75211:*:*:*:*:*:*","01F6E4B3-7264-4B6B-A2E0-EC0C6E454FE9",{"Vulnerable":4,"Criteria":123,"MatchCriteriaID":124,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:78518:*:*:*:*:*:*","BFF634F2-427F-46AF-A203-3F8F91AEB039",{"Vulnerable":4,"Criteria":126,"MatchCriteriaID":127,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:94592:*:*:*:*:*:*","C1B47446-7E43-44ED-A734-4C300ED6F6CC",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":129,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"AE6362C1-9B7D-415F-A6E7-22EB6D9485E7",{"Vulnerable":4,"Criteria":131,"MatchCriteriaID":132,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.2:90947:*:*:*:*:*:*","5617A797-C295-4534-A8BD-DB7637FEDDA1",{"Vulnerable":4,"Criteria":134,"MatchCriteriaID":135,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.2:93351:*:*:*:*:*:*","924A87A5-6809-4D3A-B660-4F3D3E930103",{"Vulnerable":4,"Criteria":137,"MatchCriteriaID":138,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.2:94597:*:*:*:*:*:*","B046FAAA-2FC4-4F69-980B-878BA24D1ACE",{"Vulnerable":4,"Criteria":140,"MatchCriteriaID":141,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.2:97682:*:*:*:*:*:*","231DF541-0D13-42DD-9392-A269999DA50C",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":143,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"FA3AD87F-BF18-48A2-8344-197185D974B0",{"Vulnerable":4,"Criteria":145,"MatchCriteriaID":146,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1016923:*:*:*:*:*:*","F3462449-36BD-4FB6-BB40-B06F0EDE570A",{"Vulnerable":4,"Criteria":148,"MatchCriteriaID":149,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1031903:*:*:*:*:*:*","5ED03A42-9D5F-4347-BA8D-DA1B5D5C771A",{"Vulnerable":4,"Criteria":151,"MatchCriteriaID":152,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1077664:*:*:*:*:*:*","41C31238-7B7A-4057-867B-B3A35690A77A",{"Vulnerable":4,"Criteria":154,"MatchCriteriaID":155,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1209934:*:*:*:*:*:*","AA263B4A-4954-4A7F-B202-D31636B210E0",{"Vulnerable":4,"Criteria":157,"MatchCriteriaID":158,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1271079:*:*:*:*:*:*","6E56CB67-2C93-4AD4-87B4-31B337D99B5F",{"Vulnerable":4,"Criteria":160,"MatchCriteriaID":161,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:848144:*:*:*:*:*:*","6CE8BB23-1EEA-41EF-BEC5-EAC5DE7F095F",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":163,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"9E7FE2E0-AA0B-4D86-B5B3-4E1417691CC5",{"Vulnerable":4,"Criteria":165,"MatchCriteriaID":166,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1271082:*:*:*:*:*:*","41AE1B48-EB15-4249-97B0-FF8BDF6A783A",{"Vulnerable":4,"Criteria":168,"MatchCriteriaID":169,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1321594:*:*:*:*:*:*","AAC380C5-0CD4-4FEF-BF40-A06BFF5BA084",{"Vulnerable":4,"Criteria":171,"MatchCriteriaID":172,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1473927:*:*:*:*:*:*","AC26F0D1-53C8-40A5-AE07-7064D45E08DD",[],[],{"lastModified":11,"cacheTime":176,"version":35},1793222374530,{"score":178,"band":179,"action":180,"scoredAt":181},48,"Medium","Plan remediation","2026-07-01T10:26:57.79119+00:00"]