All vulnerabilities

Servers and applications

CVE-2021-3032

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where configuration secrets for the “http”, “email”, and “snmptrap” v3 log forwarding server profiles can be logged to the logrcvr.log system log. Logged information may include up to 1024 bytes of the configuration including the username and password in an encrypted form and private keys used in…

Severity
Medium 4.4
Published
13 Jan 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
8.1.18, 9.0.12, 9.1.4, 10.0.1
Sources
NVD

Affected software

SoftwareAffected versions
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os
  • From 8.1.0 before 8.1.18
  • From 9.0.0 before 9.0.12
  • From 9.1.0 before 9.1.4
  • From 10.0.0 before 10.0.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-3032
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-3032