Aller au contenu
Se connecter
4.4 Moyenne

CVE-2021-3036 An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where secrets in…

Description

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where secrets in PAN-OS XML API requests are logged in cleartext to the web server logs when the API is used incorrectly. This vulnerability applies only to PAN-OS appliances that are configured to use the PAN-OS XML API and exists only when a client includes a duplicate API parameter in API requests. Logged information includes the cleartext username, password, and API key of the administrator making the PAN-OS XML API request.

Produits et versions touchés

Produit Versions touchées Corrigé en
PAN-OS 10.0 10.0 → < 10.0.1 10.0.1
PAN-OS 9.1 9.1 → < 9.1.6 9.1.6
PAN-OS 9.0 9.0 → < 9.0.12 9.0.12
PAN-OS 8.1 8.1 → < 8.1.19 8.1.19

Autres CVE de PAN-OS

Les 197 CVE de PAN-OS →
CVE-2026-0316 A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious… 1.1 Faible CVE-2026-0317 A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only… 1.2 Faible CVE-2026-0318 A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software… 4.6 Moyenne CVE-2026-0319 An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables… 4.9 Moyenne
Suivre cette CVE