CVE-2021-3049

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Cortex XSOAR versions 5.5.0 Palo Alto Networks Cortex XSOAR 6.1.0 builds earlier than 12099345

Description An improper authorization issue in the Palo Alto Networks Cortex XSOAR server allows an authenticated network-based attacker with investigation read permissions to download files from incident investigations they are aware of but not part of.

Recommendations For Cortex XSOAR versions 5.5.0, update to a version that is not affected by this issue. For Cortex XSOAR 6.1.0 builds earlier than 12099345, update to a build 12099345 or later. At the moment, there is no information about additional mitigation measures for this vulnerability.