PT-2020-15268 · Palo Alto Networks · Pan-Os

Published 2020-09-09 · Updated 2020-09-15 · CVE-2020-2043

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions earlier than 8.1.16 Palo Alto Networks PAN-OS versions earlier than 9.0.10 Palo Alto Networks PAN-OS versions earlier than 9.1.4

Description The issue is an information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Palo Alto Networks PAN-OS software. This occurs when the after-change-detail custom syslog field is enabled for configuration logs and the sensitive field appears multiple times in one log entry. The first instance of the sensitive field is masked, but subsequent instances are left in clear text.

Recommendations For PAN-OS 8.1 versions earlier than 8.1.16, update to version 8.1.16 or later to resolve the issue. For PAN-OS 9.0 versions earlier than 9.0.10, update to version 9.0.10 or later to resolve the issue. For PAN-OS 9.1 versions earlier than 9.1.4, update to version 9.1.4 or later to resolve the issue.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2020-2043

Affected Products

Pan-Os

References · 3

• https://security.paloaltonetworks.com/CVE-2020-2043 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-2043 · Security Note
• https://osv.dev/vulnerability/CVE-2020-2043 · Vendor Advisory