Vulnerability Description
There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker who is able to intercept and modify a SAML assertion to impersonate another account (XML Signature Wrapping Attack). In addition patching, Esri also strongly recommends as best practice for SAML assertions to be signed and encrypted.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Esri | Portal For Arcgis | <= 10.9 |
Related Weaknesses (CWE)
References
- https://downloads.esri.com/RESOURCES/ENTERPRISEGIS/Organization-Specific_Logins_ProductTechnical Description
- https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/PortaVendor Advisory
- https://downloads.esri.com/RESOURCES/ENTERPRISEGIS/Organization-Specific_Logins_ProductTechnical Description
- https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/PortaVendor Advisory
FAQ
What is CVE-2021-29108?
CVE-2021-29108 is a vulnerability with a CVSS score of 8.8 (HIGH). There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker who is able to intercep...
How severe is CVE-2021-29108?
CVE-2021-29108 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-29108?
Check the references section above for vendor advisories and patch information. Affected products include: Esri Portal For Arcgis.