Home

CVE-2021-3032

Description

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where configuration secrets for the http, email, and snmptrap v3 log forwarding server profiles can be logged to the logrcvr.log system log. Logged information may include up to 1024 bytes of the configuration including the username and password in an encrypted form and private keys used in any certificate profiles set for log forwarding server profiles. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.18; PAN-OS 9.0 versions earlier than PAN-OS 9.0.12; PAN-OS 9.1 versions earlier than PAN-OS 9.1.4; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.

Risk Information

Base Score
4.4
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.033

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities affected in pan-os 9.0.11NCM
Vulnerabilities CVE-2020-2035 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.17NCM
Multiple Vulnerabilities affected in pan-os 9.1.3NCM
Multiple Vulnerabilities affected in pan-os 9.1.2NCM
Multiple Vulnerabilities affected in pan-os 9.1.1NCM
Multiple Vulnerabilities affected in pan-os 9.0.5NCM
Multiple Vulnerabilities affected in pan-os 9.0.2-h4NCM
Multiple Vulnerabilities affected in pan-os 9.0.2NCM
Multiple Vulnerabilities affected in pan-os 9.0.1NCM
Multiple Vulnerabilities affected in pan-os 8.1.14NCM
Multiple Vulnerabilities affected in pan-os 8.1.11NCM
Multiple Vulnerabilities affected in pan-os 8.1.6-h2NCM
Multiple Vulnerabilities affected in pan-os 8.1.6NCM
Multiple Vulnerabilities affected in pan-os 8.1.1NCM
Multiple Vulnerabilities affected in pan-os 8.1.13NCM
Multiple Vulnerabilities affected in pan-os 8.1.8-h4NCM
Multiple Vulnerabilities affected in pan-os 8.1.8NCM
Multiple Vulnerabilities affected in pan-os 8.1.7NCM
Multiple Vulnerabilities affected in pan-os 8.1.2NCM
Multiple Vulnerabilities affected in pan-os 9.0.3NCM
Multiple Vulnerabilities affected in pan-os 8.1.9NCM
Multiple Vulnerabilities affected in pan-os 8.1.8-h5NCM
Vulnerabilities CVE-2020-2050 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.1.0NCM
Vulnerabilities CVE-2020-2050 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.7NCM
Vulnerabilities CVE-2020-2050 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.6NCM
Vulnerabilities CVE-2020-2050 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.12NCM
Vulnerabilities CVE-2020-2050 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.3NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.9NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.8NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.10NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.0NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.5NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.4-h2NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.4NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.15NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.10NCM
Vulnerabilities CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.4NCM
Vulnerabilities CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.16NCM
Vulnerabilities CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.0NCM
Vulnerabilities CVE-2021-3032 ,CVE-2021-3036 are affected in pan-os 10.0.0NCM
Insertion of Sensitive Information into Log File Vulnerability (CVE-2021-3032)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234