An improper validation of credentials in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an attacker who has no valid authentication to access and alter protected resources. This flaw effectively bypasses authentication controls, enabling the attacker to read or modify data that is intended to be protected, thereby compromising both confidentiality and integrity of the affected assets.

The vulnerability affects Palo Alto Networks Cortex XSIAM and Cortex XSOAR through the CommvaultSecurityIQ Marketplace integration. The affected component versions are 1.1.0 through 1.1.9 of the marketplace in both products.

The CVSS score of 8.1 classifies this flaw as high severity. An unauthenticated attacker can exploit the vulnerability remotely without needing any valid credentials, due to the failure to validate credentials in the CommvaultSecurityIQ integration. The EPSS score is < 1%, reflecting a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog, indicating no confirmed public exploitation yet. The impact is the potential for an attacker to read or modify any data protected by the integration.