CVE-2020-2043CWE-532

PAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs

Low · published September 9, 2020

CVSS v3.1
3.3
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

An information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Palo Alto Networks PAN-OS software when the after-change-detail custom syslog field is enabled for configuration logs and the sensitive field appears multiple times in one log entry. The first instance of the sensitive field is masked but subsequent instances are left in clear text. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1 versions earlier than PAN-OS 9.1.4.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00732 · 53.8th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2020-09-09T16:45Z
EPSS history
Timeline
  • 09 SEP 16:45Z
    PAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs
    cvelistv5