CVE-2020-2043

Low

Description

An information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Palo Alto Networks PAN-OS software when the after-change-detail custom syslog field is enabled for configuration logs and the sensitive field appears multiple times in one log entry. The first instance of the sensitive field is masked but subsequent instances are left in clear text. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1 versions earlier than PAN-OS 9.1.4.

SeverityLow

CVSS3.3

Exploit probability—

Product

Paloaltonetworks Pan-os

PublishedSep 9, 2020

First seenSep 9, 2020

Weakness typeCWE-532CWE-532

How to fix

Update

paloaltonetworks pan-os9.0.10, 9.1.4 or later

Affected products

Product	Affected versions	Fixed in
paloaltonetworks pan-os	8.1.0 ≤ v ≤ 8.1.15, 9.0.0 ≤ v < 9.0.10, 9.1.0 ≤ v < 9.1.4	9.0.10, 9.1.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.