PT-2021-18725 · Palo Alto Networks · Palo Alto Networks Prisma Cloud Compute

Jakub Palaczynski · Published 2021-06-10 · Updated 2021-06-25 · CVE-2021-3039

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Prisma Cloud Compute versions prior to 21.04.412

Description An information exposure through log file issue exists in the Palo Alto Networks Prisma Cloud Compute Console, where a secret used to authorize the role of the authenticated user is logged to a debug log file. Authenticated Operator role and Auditor role users with access to the debug log files can use this secret to gain Administrator role access for their active session in Prisma Cloud Compute.

Recommendations For Prisma Cloud Compute versions prior to 21.04.412, update to version 21.04.412 or later to resolve the issue. As a temporary workaround, consider restricting access to the debug log files to prevent authenticated Operator role and Auditor role users from gaining Administrator role access.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2021-3039

Affected Products

Palo Alto Networks Prisma Cloud Compute

References · 4

• https://osv.dev/vulnerability/CVE-2021-3039 · Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2021-3039 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3039 · Security Note
• https://t.me/cvenotify/16087 · Telegram Post