SB2021062225 - Authorization bypass in Cortex XSOAR REST API
Published: June 22, 2021
Security Bulletin ID
SB2021062225
Severity
High
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper Authorization (CVE-ID: CVE-2021-3044)
The vulnerability allows a remote attacker to bypass authorization checks.
The vulnerability exists due to an error in the REST API. A remote attacker can bypass authentication process and gain unauthorized access to the application.
Note, this vulnerability affects only to Cortex XSOAR configurations with active API key integrations.
Remediation
Install update from vendor's website.