CVE-2021-3033: Prisma Cloud Compute: SAML Authentication Bypass Vulnerability in Console
An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud Compute console. This vulnerability enables an attacker to bypass signature validation during SAML authentication by logging in to the Prisma Cloud Compute console as any authorized user. This issue impacts: All versions of Prisma Cloud Compute 19.11, Prisma Cloud Compute 20.04, and Prisma Cloud Compute 20.09; Prisma Cloud Compute 20.12 before update 1. Prisma Cloud Compute SaaS version is not impacted by this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Palo Alto Networks Prisma Cloud Compute (console)to a version that resolves this vulnerability.Fixed in 20.12 update 1
Event History
Frequently Asked Questions
What is the severity of CVE-2021-3033?
CVE-2021-3033 is rated as a high-severity vulnerability due to its potential to allow unauthorized access.
How do I fix CVE-2021-3033?
To fix CVE-2021-3033, upgrade to the latest version of Palo Alto Networks Prisma Cloud Compute that addresses this vulnerability.
Which versions of Prisma Cloud Compute are affected by CVE-2021-3033?
CVE-2021-3033 affects Prisma Cloud Compute versions 19.11, 20.04, 20.09, and 20.12, including their updates.
What can an attacker achieve by exploiting CVE-2021-3033?
By exploiting CVE-2021-3033, an attacker can bypass signature validation during SAML authentication, compromising user accounts.
Are there any workarounds for CVE-2021-3033?
There are no specified workarounds for CVE-2021-3033; updating the software is the recommended action.