CVE-2021-3037

Description

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection details for a scheduled configuration export are logged in system logs. Logged information includes the cleartext username, password, and IP address used to export the PAN-OS configuration to the destination server.

Risk Information

Base Score
2.3
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
EPSS Score
Exploitation Probability
0.07

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities affected in pan-os 9.0.11NCM
Vulnerabilities CVE-2020-2035 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.17NCM
Multiple Vulnerabilities affected in pan-os 9.1.3NCM
Multiple Vulnerabilities affected in pan-os 9.0.3NCM
Multiple Vulnerabilities affected in pan-os 8.1.9NCM
Multiple Vulnerabilities affected in pan-os 8.1.8-h5NCM
Vulnerabilities CVE-2020-2050 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.1.0NCM
Vulnerabilities CVE-2020-2050 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.7NCM
Vulnerabilities CVE-2020-2050 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.6NCM
Vulnerabilities CVE-2020-2050 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.12NCM
Vulnerabilities CVE-2020-2050 ,CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.3NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.9NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.8NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.10NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.0NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.5NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.4-h2NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.4NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.15NCM
Vulnerabilities CVE-2021-3031 ,CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.10NCM
Vulnerabilities CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.4NCM
Vulnerabilities CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.16NCM
Vulnerabilities CVE-2021-3032 ,CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.0NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.1.1NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.5NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.2-h4NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.2NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 9.0.1NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.6-h2NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.6NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.18NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.14NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.11NCM
Vulnerabilities CVE-2021-3036 ,CVE-2021-3037 are affected in pan-os 8.1.1NCM
Vulnerabilities CVE-2021-3037 are affected in pan-os 9.1.2NCM
Vulnerabilities CVE-2021-3037 are affected in pan-os 9.0.12NCM
Vulnerabilities CVE-2021-3037 are affected in pan-os 8.1.8-h4NCM
Vulnerabilities CVE-2021-3037 are affected in pan-os 8.1.8NCM
Vulnerabilities CVE-2021-3037 are affected in pan-os 8.1.7NCM
Vulnerabilities CVE-2021-3037 are affected in pan-os 8.1.2NCM
Vulnerabilities CVE-2021-3037 are affected in pan-os 8.1.13NCM
DEPRECATED: Information Exposure Through Debug Log Files Vulnerability (CVE-2021-3037)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234