Cortex XSOAR and XSIAM Improper Cryptographic Signature Verification Vulnerability in Microsoft Teams Integration

A vulnerability allowing improper verification of cryptographic signatures has been identified in the Cortex XSOAR and Cortex XSIAM platforms. This issue arises during the integration with Microsoft Teams, enabling an unauthenticated user to access and modify protected resources. The vulnerability affects Cortex XSOAR and Cortex XSIAM Microsoft Teams Marketplace versions 1.5.0 prior to 1.5.52.

Impact

Exploitation of this vulnerability could allow an unauthenticated user to access and alter protected resources within the affected applications.

Remediation

Users can upgrade to version 1.5.52 or later to address this vulnerability. Instructions for updating can be found on the Palo Alto Networks support site.