Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Palo Alto Networks | PAN-OS | affected |
|
||||||||||||||||||
| Palo Alto Networks | Prisma Access | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Vendor Solution
This issue is fixed in PAN-OS 8.1.20, PAN-OS 9.0.14, PAN-OS 9.1.9, PAN-OS 10.0.1, and all later PAN-OS versions. This issue is fixed in Prisma Access 2.2 Preferred and all later Prisma Access versions.
Vendor Workaround
Enable signatures for Unique Threat ID 91585 on traffic processed by the firewall to block attacks against CVE-2021-3056.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2021-26408 | A memory corruption vulnerability in Palo Alto Networks PAN-OS GlobalProtect Clientless VPN enables an authenticated attacker to execute arbitrary code with root user privileges during SAML authentication. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14; PAN-OS 9.1 versions earlier than PAN-OS 9.1.9; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1. Prisma Access customers with Prisma Access 2.1 Preferred firewalls are impacted by this issue. |
| Link | Providers |
|---|---|
| https://security.paloaltonetworks.com/CVE-2021-3056 |
|
No history.
MITRE
Status: PUBLISHED
Assigner: palo_alto
Published:
Updated: 2024-09-16T20:36:56.323Z
Reserved: 2021-01-06T00:00:00.000Z
Link: CVE-2021-3056
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-11-10T17:15:09.553
Modified: 2024-11-21T06:20:51.940
Link: CVE-2021-3056
Redhat
No data.
OpenCVE Enrichment
No data.