Palo Alto Networks · Pan-Os · CVE-2021-3036
**Name of the Vulnerable Software and Affected Versions**
Palo Alto Networks PAN-OS (affected versions not specified)
**Description**
An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software. This issue occurs when the PAN-OS XML API is used incorrectly, specifically when a client includes a duplicate API parameter in API requests. As a result, secrets in PAN-OS XML API requests are logged in cleartext to the web server logs. The logged information includes the cleartext `username`, `password`, and `API key` of the administrator making the PAN-OS XML API request.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.