[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fO9vvG7c6V_S6ES89uuGor5DqWCI0UYshW9T9okZRWvs":3,"g5a-risk:CVE-2021-3051":176},{"success":4,"data":5,"meta":174},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":42,"epssPercentile":25,"epssTimeSeries":43,"severity":44,"affectedProducts":45,"affectedProductsCount":60,"references":61,"referencesCount":67,"weaknesses":68,"weaknessesCount":67,"isActivelyExploited":77,"cisaInfo":25,"otxData":25,"relatedBlogPosts":78,"seoMetadata":79,"configurations":104,"relatedVendorCves":172,"notableEvents":173},"CVE-2021-3051","What is CVE-2021-3051?","An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based attacker with specific knowledge of the Cortex XSOAR instance to access protected resources and perform unauthorized actions on the Cortex XSOAR server. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 1578677; Cortex XSOAR 6.0.2 builds earlier than 1576452; Cortex XSOAR 6.1.0 builds earlier than 1578663; Cortex XSOAR 6.2.0 builds earlier than 1578666. All Cortex XSOAR instances hosted by Palo Alto Networks are protected from this vulnerability; no additional action is required for these instances.","An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR SAML authentication that enables an unauthenticated network-based at...","2021-09-08T17:15:11.777","2021-09-17T14:47:49.12",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":32,"CVSSMetricV40":25},[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"psirt@paloaltonetworks.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[33],{"Source":17,"Type":18,"CVSSData":34,"BaseSeverity":37,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":35,"VectorString":36,"AccessVector":21,"AccessComplexity":37,"Authentication":23,"ConfidentialityImpact":38,"IntegrityImpact":38,"AvailabilityImpact":38,"BaseScore":39,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.00581,[42,42,42,42,42,42,42],"High",[46,51,54,57],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"paloaltonetworks","cortex_xsoar","5.5.0","cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:-:*:*:*:*:*:*",{"vendor":47,"product":48,"version":52,"criteria":53,"vulnerable":4},"6.0.2","cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.2:-:*:*:*:*:*:*",{"vendor":47,"product":48,"version":55,"criteria":56,"vulnerable":4},"6.1.0","cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:-:*:*:*:*:*:*",{"vendor":47,"product":48,"version":58,"criteria":59,"vulnerable":4},"6.2.0","cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:-:*:*:*:*:*:*",4,[62],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fsecurity.paloaltonetworks.com\u002FCVE-2021-3051","Paloaltonetworks",[66],"Vendor Advisory",1,[69],{"id":70,"name":71,"description":72,"extendedDescription":73,"status":74,"abstraction":75,"structure":76},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","","Draft","Base","Simple",false,[],{"title":80,"metaDescription":81,"keywords":82,"canonicalUrl":83,"structuredData":84},"What is CVE-2021-3051? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-3051, a high severity cyber security vulnerability from 2021. An improper verification of cryptographic signature vulnerab...","CVE-2021-3051, CVE-2021-3051 vulnerability, CVE-2021-3051 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, paloaltonetworks security, cortex_xsoar vulnerability","\u002Fwhat-is\u002Fcve-2021-3051",{"@context":85,"@type":86,"headline":80,"description":81,"datePublished":10,"dateModified":11,"author":87,"publisher":91,"about":95,"mainEntityOfPage":99,"articleSection":102,"keywords":103},"https:\u002F\u002Fschema.org","TechArticle",{"@type":88,"name":89,"url":90},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":88,"name":89,"url":90,"logo":92},{"@type":93,"url":94},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":96,"name":6,"description":97,"additionalType":98},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":100,"@id":101},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-3051","Cybersecurity","CVE-2021-3051, CVE-2021-3051 vulnerability, CVE-2021-3051 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[105],{"Operator":25,"Negate":25,"Nodes":106},[107],{"Operator":108,"Negate":25,"CPEMatch":109},"OR",[110,112,115,118,121,124,127,129,132,135,138,141,143,146,149,152,155,158,161,163,166,169],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":111,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"0513C590-B393-45B9-BD95-14F09A33A6FB",{"Vulnerable":4,"Criteria":113,"MatchCriteriaID":114,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:70066:*:*:*:*:*:*","CCC73F19-BAEC-464E-813E-AABFB0FF1749",{"Vulnerable":4,"Criteria":116,"MatchCriteriaID":117,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:73387:*:*:*:*:*:*","829FDD7F-9F92-4425-BA03-7A916C672A1A",{"Vulnerable":4,"Criteria":119,"MatchCriteriaID":120,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:75211:*:*:*:*:*:*","01F6E4B3-7264-4B6B-A2E0-EC0C6E454FE9",{"Vulnerable":4,"Criteria":122,"MatchCriteriaID":123,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:78518:*:*:*:*:*:*","BFF634F2-427F-46AF-A203-3F8F91AEB039",{"Vulnerable":4,"Criteria":125,"MatchCriteriaID":126,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:94592:*:*:*:*:*:*","C1B47446-7E43-44ED-A734-4C300ED6F6CC",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":128,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"AE6362C1-9B7D-415F-A6E7-22EB6D9485E7",{"Vulnerable":4,"Criteria":130,"MatchCriteriaID":131,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.2:90947:*:*:*:*:*:*","5617A797-C295-4534-A8BD-DB7637FEDDA1",{"Vulnerable":4,"Criteria":133,"MatchCriteriaID":134,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.2:93351:*:*:*:*:*:*","924A87A5-6809-4D3A-B660-4F3D3E930103",{"Vulnerable":4,"Criteria":136,"MatchCriteriaID":137,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.2:94597:*:*:*:*:*:*","B046FAAA-2FC4-4F69-980B-878BA24D1ACE",{"Vulnerable":4,"Criteria":139,"MatchCriteriaID":140,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.2:97682:*:*:*:*:*:*","231DF541-0D13-42DD-9392-A269999DA50C",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":142,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"FA3AD87F-BF18-48A2-8344-197185D974B0",{"Vulnerable":4,"Criteria":144,"MatchCriteriaID":145,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1016923:*:*:*:*:*:*","F3462449-36BD-4FB6-BB40-B06F0EDE570A",{"Vulnerable":4,"Criteria":147,"MatchCriteriaID":148,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1031903:*:*:*:*:*:*","5ED03A42-9D5F-4347-BA8D-DA1B5D5C771A",{"Vulnerable":4,"Criteria":150,"MatchCriteriaID":151,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1077664:*:*:*:*:*:*","41C31238-7B7A-4057-867B-B3A35690A77A",{"Vulnerable":4,"Criteria":153,"MatchCriteriaID":154,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1209934:*:*:*:*:*:*","AA263B4A-4954-4A7F-B202-D31636B210E0",{"Vulnerable":4,"Criteria":156,"MatchCriteriaID":157,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:1271079:*:*:*:*:*:*","6E56CB67-2C93-4AD4-87B4-31B337D99B5F",{"Vulnerable":4,"Criteria":159,"MatchCriteriaID":160,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:848144:*:*:*:*:*:*","6CE8BB23-1EEA-41EF-BEC5-EAC5DE7F095F",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":162,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"9E7FE2E0-AA0B-4D86-B5B3-4E1417691CC5",{"Vulnerable":4,"Criteria":164,"MatchCriteriaID":165,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1271082:*:*:*:*:*:*","41AE1B48-EB15-4249-97B0-FF8BDF6A783A",{"Vulnerable":4,"Criteria":167,"MatchCriteriaID":168,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1321594:*:*:*:*:*:*","AAC380C5-0CD4-4FEF-BF40-A06BFF5BA084",{"Vulnerable":4,"Criteria":170,"MatchCriteriaID":171,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.2.0:1473927:*:*:*:*:*:*","AC26F0D1-53C8-40A5-AE07-7064D45E08DD",[],[],{"lastModified":11,"cacheTime":175,"version":35},1792237688925,{"score":177,"band":178,"action":179,"scoredAt":180},48,"Medium","Plan remediation","2026-10-16T06:52:01.943038+00:00"]