CVE-2021-3034

Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs

State: Published
Severity: 5.1 Medium
Published: Mar 10, 2021
Updated: Sep 16, 2024
Reserved: Jan 6, 2021

Description

An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the private key and identity provider certificate used to configure the SAML SSO integration. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 98622; Cortex XSOAR 6.0.1 builds earlier than 830029; Cortex XSOAR 6.0.2 builds earlier than 98623; Cortex XSOAR 6.1.0 builds earlier than 848144.

Scores

CVSS	Score	Vector	Source
3.1	5.1 Medium	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N	palo_alto

Weaknesses

CWE-532 Information Exposure Through Log Files

Affected Products

Product	Versions
Cortex XSOARPalo Alto Networks	5.5.0 to before 98622Affectedfrom 98622Not affected 6.0.2 to before 98623Affectedfrom 98623Not affected 6.0.1 to before 830029Affectedfrom 830029Not affected 6.1.0 to before 848144Affectedfrom 848144Not affected

References

https://security.paloaltonetworks.com/CVE-2021-3034

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.