UpHeron
All vulnerabilities

Servers and applications

CVE-2021-3047

A cryptographically weak pseudo-random number generator (PRNG) is used during authentication to the Palo Alto Networks PAN-OS web interface. This enables an authenticated attacker, with the capability to observe their own authentication secrets over a long duration on the PAN-OS appliance, to impersonate another authenticated web interface administrator's session. This issue impacts: PAN-OS 8.1…

Severity
Low 3.1
Published
11 Aug 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
8.1.19, 9.0.14, 9.1.10, 10.0.4
Sources
NVD

Affected software

SoftwareAffected versions
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os
  • From 8.1.0 before 8.1.19
  • From 9.0.0 before 9.0.14
  • From 9.1.0 before 9.1.10
  • From 10.0.0 before 10.0.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-3047
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-3047