Skip to content
Sign in
4.4 Medium

CVE-2021-3032 An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where…

Description

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where configuration secrets for the “http”, “email”, and “snmptrap” v3 log forwarding server profiles can be logged to the logrcvr.log system log. Logged information may include up to 1024 bytes of the configuration including the username and password in an encrypted form and private keys used in any certificate profiles set for log forwarding server profiles. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.18; PAN-OS 9.0 versions earlier than PAN-OS 9.0.12; PAN-OS 9.1 versions earlier than PAN-OS 9.1.4; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.

Affected products and versions

Product Affected versions Fixed in
PAN-OS 10.0 10.0 → < 10.0.1 10.0.1
PAN-OS 9.1 9.1 → < 9.1.4 9.1.4
PAN-OS 9.0 9.0 → < 9.0.12 9.0.12
PAN-OS 8.1 8.1 → < 8.1.18 8.1.18

Other CVEs of PAN-OS

The 197 CVEs of PAN-OS →
CVE-2026-0316 A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious… 1.1 Low CVE-2026-0317 A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only… 1.2 Low CVE-2026-0318 A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software… 4.6 Medium CVE-2026-0319 An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables… 4.9 Medium
Track this CVE