Palo Alto Networks · Pan-Os · CVE-2021-3046
**Name of the Vulnerable Software and Affected Versions**
PAN-OS versions 8.1 through 8.1.18
PAN-OS versions 9.0 through 9.0.13
PAN-OS versions 9.1 through 9.1.8
PAN-OS versions 10.0 through 10.0.4
**Description**
An improper authentication issue exists in Palo Alto Networks PAN-OS software, allowing a SAML authenticated attacker to impersonate any other user in the GlobalProtect Portal and GlobalProtect Gateway when they are configured to use SAML authentication.
**Recommendations**
For PAN-OS 8.1 versions earlier than 8.1.19, update to version 8.1.19 or later.
For PAN-OS 9.0 versions earlier than 9.0.14, update to version 9.0.14 or later.
For PAN-OS 9.1 versions earlier than 9.1.9, update to version 9.1.9 or later.
For PAN-OS 10.0 versions earlier than 10.0.5, update to version 10.0.5 or later.