Vulnerability Details CVE-2021-29108
There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker who is able to intercept and modify a SAML assertion to impersonate another account (XML Signature Wrapping Attack). In addition patching, Esri also strongly recommends as best practice for SAML assertions to be signed and encrypted.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.2%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
- https://downloads.esri.com/RESOURCES/ENTERPRISEGIS/Organization-Specific_Logins_FAQs.pdf
- https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/Portal-for-ArcGIS-Security-2021-Update-1-Patch/
- https://downloads.esri.com/RESOURCES/ENTERPRISEGIS/Organization-Specific_Logins_FAQs.pdf
- https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/Portal-for-ArcGIS-Security-2021-Update-1-Patch/
Products affected by CVE-2021-29108
-
cpe:2.3:a:esri:portal_for_arcgis:-
-
cpe:2.3:a:esri:portal_for_arcgis:10.6
-
cpe:2.3:a:esri:portal_for_arcgis:10.6.1
-
cpe:2.3:a:esri:portal_for_arcgis:10.7.1
-
cpe:2.3:a:esri:portal_for_arcgis:10.8
-
cpe:2.3:a:esri:portal_for_arcgis:10.8.1
-
cpe:2.3:a:esri:portal_for_arcgis:10.9