An improper validation of credentials in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an attacker who has no valid authentication to access and alter protected resources. This flaw effectively bypasses authentication controls, enabling the attacker to read or modify data that is intended to be protected. Consequently, both the confidentiality and integrity of the affected assets are compromised.

The vulnerability affects Palo Alto Networks Cortex XSIAM and Cortex XSOAR through the CommvaultSecurityIQ Marketplace integration. The affected component versions are 1.1.0 through 1.1.9 of the marketplace in both products. The products are listed as \"Palo Alto Networks Cortex XSIAM CommvaultSecurityIQ Marketplace\" and \"Palo Alto Networks Cortex XSOAR CommvaultSecurityIQ Marketplace\".

The CVSS score of 8.1 classifies this flaw as high severity. An unauthenticated attacker can exploit the vulnerability remotely without needing any valid credentials, due to the failure to validate credentials in the CommvaultSecurityIQ integration. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating no confirmed public exploitation yet. The impact is the potential for an attacker to read or modify any data protected by the integration.