← CVE Intelligence

CVE-2021-3037

PAN-OS: Secrets for scheduled configuration exports are logged in system logs PUBLISHED

Description (CNA)

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection details for a scheduled configuration export are logged in system logs. Logged information includes the cleartext username, password, and IP address used to export the PAN-OS configuration to the destination server.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / PAN-OSaffected 8.1 before 8.1.19; affected 9.0 before 9.0.13; affected 9.1 before 9.1.4; unaffected 10.0.0 before 10.0*

CWE

CWE-534

References

ADP enrichment

CVE

No English description supplied.