Aller au contenu
Se connecter
4.4 Moyenne

CVE-2021-3032 An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where…

Description

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where configuration secrets for the “http”, “email”, and “snmptrap” v3 log forwarding server profiles can be logged to the logrcvr.log system log. Logged information may include up to 1024 bytes of the configuration including the username and password in an encrypted form and private keys used in any certificate profiles set for log forwarding server profiles. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.18; PAN-OS 9.0 versions earlier than PAN-OS 9.0.12; PAN-OS 9.1 versions earlier than PAN-OS 9.1.4; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.

Produits et versions touchés

Produit Versions touchées Corrigé en
PAN-OS 10.0 10.0 → < 10.0.1 10.0.1
PAN-OS 9.1 9.1 → < 9.1.4 9.1.4
PAN-OS 9.0 9.0 → < 9.0.12 9.0.12
PAN-OS 8.1 8.1 → < 8.1.18 8.1.18

Autres CVE de PAN-OS

Les 197 CVE de PAN-OS →
CVE-2026-0316 A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious… 1.1 Faible CVE-2026-0317 A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only… 1.2 Faible CVE-2026-0318 A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software… 4.6 Moyenne CVE-2026-0319 An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables… 4.9 Moyenne
Suivre cette CVE