CVE-2021-3033: palo alto networks prisma cloud compute
Vulnerability summary
CVE-2021-3033 is a critical (CVSS 9.8) vulnerability in palo alto networks prisma cloud compute. EPSS estimates a 1.21% chance of exploitation in the next 30 days, higher than 68.2% of scored vulnerabilities.
Timeline
- 10-02-2021PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud Compute console. This vulnerability enables an attacker to bypass signature validation during SAML authentication by logging in to the Prisma Cloud Compute console as any authorized user. This issue impacts: All versions of Prisma Cloud Compute 19.11, Prisma Cloud Compute 20.04, and Prisma Cloud Compute 20.09; Prisma Cloud Compute 20.12 before update 1. Prisma Cloud Compute SaaS version is not impacted by this vulnerability.
CVSS metrics
3 scores · 2 sources · 2 versions- CVE.orgCNA9.1CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NDiffers
EPSS trend
Probability
1.21%
Chance of exploitation in the next 30 days
Percentile
68%
Versus all other CVEs
30-day change
0.00 pp
From 1.21% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Palo alto networks1 product
- prisma cloud compute≥ 19.11, ≤ update 2 | ≥ 20.04, ≤ update 2 | ≥ 20.09, ≤ update 2 | ≥ 20.12, < update 1
Paloaltonetworks1 product
- prisma_cloud19.11 | 19.11:update_1 | 19.11:update_2 | 20.04 | 20.04:update_1 | 20.04:update_2 | 20.09 | 20.09:update_1 | 20.09:update_2 | 20.12
2 vendors · 2 products