Palo Alto Networks Security Advisories - September 8, 2021

[icecream-guy]

New Palo Alto Networks Security Advisories.
Palo Alto Networks has published 7 new Security Advisories at https://security.paloaltonetworks.com on September 8, 2021:

Cortex XSOAR
________________________________________
CVE-2021-3051 Cortex XSOAR: Authentication Bypass in SAML Authentication (Severity: HIGH)
https://security.paloaltonetworks.com/CVE-2021-3051

CVE-2021-3049 Cortex XSOAR: Improper Authorization of Incident Investigations Vulnerability (Severity: LOW)
https://security.paloaltonetworks.com/CVE-2021-3049

PAN-OS
________________________________________
CVE-2020-10188 PAN-OS: Impact of Telnet Remote-Code-Execution (RCE) Vulnerability (CVE-2020-10188) (Severity: HIGH)
https://security.paloaltonetworks.com/CVE-2020-10188

CVE-2021-3052 PAN-OS: Reflected Cross-Site Scripting (XSS) in Web Interface (Severity: HIGH)
https://security.paloaltonetworks.com/CVE-2021-3052

CVE-2021-3053 PAN-OS: Exceptional Condition Denial-of-Service (DoS) (Severity: HIGH)
https://security.paloaltonetworks.com/CVE-2021-3053

CVE-2021-3054 PAN-OS: Unsigned Code Execution During Plugin Installation Race Condition Vulnerability (Severity: HIGH)
https://security.paloaltonetworks.com/CVE-2021-3054

CVE-2021-3055 PAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web Interface (Severity: MEDIUM)
https://security.paloaltonetworks.com/CVE-2021-3055


Please visit our Security Advisories website to learn more at https://security.paloaltonetworks.com/.
If you have questions, please contact support https://www.paloaltonetworks.com/company/contact-support.

Regards,
Product Security Incident Response Team
Palo Alto Networks