Home

CVE-2021-3036

Description

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where secrets in PAN-OS XML API requests are logged in cleartext to the web server logs when the API is used incorrectly. This vulnerability applies only to PAN-OS appliances that are configured to use the PAN-OS XML API and exists only when a client includes a duplicate API parameter in API requests. Logged information includes the cleartext username, password, and API key of the administrator making the PAN-OS XML API request.

Risk Information

Base Score
4.4
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.143

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities affected in pan-os 9.1.4NCM
Multiple Vulnerabilities affected in pan-os 9.0.11NCM
Vulnerabilities CVE-2020-2035 ,CVE-2021-3036 are affected in pan-os 9.1.5NCM
Vulnerabilities CVE-2020-2035 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.17NCM
Multiple Vulnerabilities affected in pan-os 9.1.3NCM
Multiple Vulnerabilities affected in pan-os 9.1.2NCM
Multiple Vulnerabilities affected in pan-os 8.1.13NCM
Multiple Vulnerabilities affected in pan-os 8.1.8-h4NCM
Multiple Vulnerabilities affected in pan-os 8.1.8NCM
Multiple Vulnerabilities affected in pan-os 8.1.7NCM
Multiple Vulnerabilities affected in pan-os 8.1.2NCM
Multiple Vulnerabilities affected in pan-os 9.0.3NCM
Multiple Vulnerabilities affected in pan-os 8.1.9NCM
Multiple Vulnerabilities affected in pan-os 8.1.8-h5NCM
Vulnerabilities CVE-2020-2050 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.1.0NCM
Vulnerabilities CVE-2020-2050 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.7NCM
Vulnerabilities CVE-2020-2050 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.6NCM
Vulnerabilities CVE-2020-2050 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.12NCM
Vulnerabilities CVE-2020-2050 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.3NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.9NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.8NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.10NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.0NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.5NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.4-h2NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.4NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.15NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.10NCM
Vulnerabilities CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.4NCM
Vulnerabilities CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.16NCM
Vulnerabilities CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.0NCM
Vulnerabilities CVE-2021-3032 ,CVE-2021-3036 are affected in pan-os 10.0.0NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.1.1NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.5NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.2-h4NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.2NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.1NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.6-h2NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.6NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.18NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.14NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.11NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.1NCM
Insertion of Sensitive Information into Log File Vulnerability (CVE-2021-3036)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234