Vulnerabilities > CVE-2021-3049 - Unspecified vulnerability in Paloaltonetworks Cortex Xsoar 5.5.0/6.1.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with investigation read permissions to download files from incident investigations of which they are aware but are not a part of. This issue impacts: All Cortex XSOAR 5.5.0 builds; Cortex XSOAR 6.1.0 builds earlier than 12099345. This issue does not impact Cortex XSOAR 6.2.0 versions.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 11 |