-
Notifications
You must be signed in to change notification settings - Fork 741
/
Copy pathCVE-2021-3033.json
151 lines (151 loc) · 5.56 KB
/
CVE-2021-3033.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
{
"CVE_data_meta": {
"ASSIGNER": "[email protected]",
"DATE_PUBLIC": "2021-02-10T17:00:00.000Z",
"ID": "CVE-2021-3033",
"STATE": "PUBLIC",
"TITLE": "Prisma Cloud Compute: SAML Authentication Bypass Vulnerability in Console"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Prisma Cloud Compute",
"version": {
"version_data": [
{
"version_affected": "<=",
"version_name": "19.11",
"version_value": "update 2"
},
{
"version_affected": "<=",
"version_name": "20.04",
"version_value": "update 2"
},
{
"version_affected": "<=",
"version_name": "20.09",
"version_value": "update 2"
},
{
"version_affected": "<",
"version_name": "20.12",
"version_value": "update 1"
},
{
"version_affected": "!>=",
"version_name": "20.12",
"version_value": "update 1"
}
]
}
}
]
},
"vendor_name": "Palo Alto Networks"
}
]
}
},
"configuration": [
{
"lang": "eng",
"value": "This issue impacts only Prisma Cloud Compute configurations that use SAML authentication."
}
],
"credit": [
{
"lang": "eng",
"value": "This issue was found by Palo Alto Networks during internal security review."
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud Compute console. This vulnerability enables an attacker to bypass signature validation during SAML authentication by logging in to the Prisma Cloud Compute console as any authorized user. This issue impacts: All versions of Prisma Cloud Compute 19.11, Prisma Cloud Compute 20.04, and Prisma Cloud Compute 20.09; Prisma Cloud Compute 20.12 before update 1. Prisma Cloud Compute SaaS version is not impacted by this vulnerability."
}
]
},
"exploit": [
{
"lang": "eng",
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-347 Improper Verification of Cryptographic Signature"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"url": "https://security.paloaltonetworks.com/CVE-2021-3033",
"name": "https://security.paloaltonetworks.com/CVE-2021-3033"
}
]
},
"solution": [
{
"lang": "eng",
"value": "This issue is fixed in Prisma Cloud Compute 20.12 update 1 and all later versions."
}
],
"source": {
"discovery": "INTERNAL"
},
"timeline": [
{
"lang": "eng",
"time": "2021-02-10T17:00:00.000Z",
"value": "Initial publication"
}
],
"work_around": [
{
"lang": "eng",
"value": "You can mitigate the impact of this issue by disabling SAML authentication in the Prisma Cloud Compute configuration"
}
],
"x_affectedList": [
"Prisma Cloud Compute 20.12",
"Prisma Cloud Compute 20.09",
"Prisma Cloud Compute 20.04",
"Prisma Cloud Compute 19.11"
]
}