CVE-2021-3037
Low
Description
An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection details for a scheduled configuration export are logged in system logs. Logged information includes the cleartext username, password, and IP address used to export the PAN-OS configuration to the destination server.
SeverityLow
CVSS2.3
Exploit probability17. percentile0.3%
Product
Paloaltonetworks Pan-os
PublishedApr 20, 2021
First seenApr 20, 2021
Weakness typeCWE-534CWE-534
How to fix
Update
- paloaltonetworks pan-os8.1.19, 9.0.13, 9.1.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paloaltonetworks pan-os | 8.1.0 ≤ v < 8.1.19, 9.0.0 ≤ v < 9.0.13, 9.1.0 ≤ v < 9.1.4 | 8.1.19, 9.0.13, 9.1.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.