CVE-2021-3033

Prisma Cloud Compute: SAML Authentication Bypass Vulnerability in Console

State: Published
Severity: 9.1 Critical
Published: Feb 10, 2021
Updated: Sep 17, 2024
Reserved: Jan 6, 2021

Description

An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud Compute console. This vulnerability enables an attacker to bypass signature validation during SAML authentication by logging in to the Prisma Cloud Compute console as any authorized user. This issue impacts: All versions of Prisma Cloud Compute 19.11, Prisma Cloud Compute 20.04, and Prisma Cloud Compute 20.09; Prisma Cloud Compute 20.12 before update 1. Prisma Cloud Compute SaaS version is not impacted by this vulnerability.

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	palo_alto

Weaknesses

CWE-347 Improper Verification of Cryptographic Signature

Affected Products

Product	Versions
Prisma Cloud ComputePalo Alto Networks	19.11 through update 2Affected 20.04 through update 2Affected 20.09 through update 2Affected 20.12 to before update 1Affectedfrom update 1Not affected

References

https://security.paloaltonetworks.com/CVE-2021-3033

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.