CVE-2021-3034

An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the private key and identity provider certificate used to configure the SAML SSO integration. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 98622; Cortex XSOAR 6.0.1 builds earlier than 830029; Cortex XSOAR 6.0.2 builds earlier than 98623; Cortex XSOAR 6.1.0 builds earlier than 848144.

• CWE-532
• CWE-532

• https://security.paloaltonetworks.com/CVE-2021-3034Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2021-3034Vendor Advisory

Published

Mar 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30334Possible use after free due to lack of null check of DRM fil…7.8
• CVE-2021-30335Possible assertion in QOS request due to improper validation…7.8
• CVE-2021-30336Possible out of bound read due to lack of domain input valid…7.8
• CVE-2021-30337Possible use after free when process shell memory is freed u…7.8
• CVE-2021-30338Improper input validation in TrustZone memory transfer inter…5.5
• CVE-2021-30339Reading PRNG output may lead to improper key generation due …5.5
• CVE-2021-30340Reachable assertion due to improper validation of coreset in…7.5
• CVE-2021-30341Improper buffer size validation of DSM packet received can l…9.8
• CVE-2021-30342Improper integrity check can lead to race condition between …5.9
• CVE-2021-30343Improper integrity check can lead to race condition between …5.9
• CVE-2021-30344Improper authorization of a replayed LTE security mode comma…7.5
• CVE-2021-30345RPM secure Stream can access any secure resource due to impr…5.5