CVE-2021-3037

LOW Year: 2021
CVSS v3 Score
2.3
Low
CVSS v2 Score
2.1
Low
Weakness Type
CWE-534
View all →

Vulnerability Description

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection details for a scheduled configuration export are logged in system logs. Logged information includes the cleartext username, password, and IP address used to export the PAN-OS configuration to the destination server.

Related Vulnerabilities

CVE-2015-6941

CRITICAL
CVSS:9.8(Critical)

win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.

CWE-5342015

CVE-2020-2004

MEDIUM
CVSS:5.5(Medium)

Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are collected for troubleshooting on GlobalProtect app (also known as GlobalProtect...

CWE-5342020

CVE-2023-5028

MEDIUM
CVSS:4.6(Medium)

A vulnerability, which was classified as problematic, has been found in China Unicom TEWA-800G 4.16L.04_CT2015_Yueme. Affected by this issue is some unknown functionality. The manipulation leads to in...

CWE-5342023