PT-2021-18723 · Palo Alto Networks · Pan-Os

Published 2021-04-14 · Updated 2022-10-25 · CVE-2021-3037

Positive Technologies (AI Summary)

CVSS v3.1

2.3

Low

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS (affected versions not specified)

Description An information exposure through log file vulnerability exists in the software where the connection details for a scheduled configuration export are logged in system logs. The logged information includes the cleartext username, password, and IP address used to export the configuration to the destination server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Weakness Enumeration

CWE-532

CWE-534

Related Identifiers

CVE-2021-3037

Affected Products

Pan-Os

References · 4

• https://osv.dev/vulnerability/CVE-2021-3037 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3037 · Security Note
• https://security.paloaltonetworks.com/CVE-2021-3037 · Vendor Advisory
• https://t.me/cvenotify/13651 · Telegram Post