CVE-2021-3037CWE-534

PAN-OS: Secrets for scheduled configuration exports are logged in system logs

Low · published April 20, 2021

CVSS v3.1
2.3
EPSS
0%
Percentile
16.7
In the wild
Unconfirmed
What it is

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection details for a scheduled configuration export are logged in system logs. Logged information includes the cleartext username, password, and IP address used to export the PAN-OS configuration to the destination server.

The record
Technical detail
CVSS v3.1
2.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00253 · 16.7th percentile
Weakness
CWE-534 · DEPRECATED: Information Exposure Through Debug Log Files
Published
2021-04-20T03:15Z
EPSS history
Timeline
  • 20 APR 03:15Z
    PAN-OS: Secrets for scheduled configuration exports are logged in system logs
    cvelistv5