CVE-2020-2043 LOW

CVE-2020-2043: PAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs

Vendor Palo Alto Networks
Product PAN-OS
Weakness CWE-532 · Sensitive info in logs
Published September 9, 2020
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

3.3/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

An information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Palo Alto Networks PAN-OS software when the after-change-detail custom syslog field is enabled for configuration logs and the sensitive field appears multiple times in one log entry. The first instance of the sensitive field is masked but subsequent instances are left in clear text. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1 versions earlier than PAN-OS 9.1.4.

Key dates

02Disclosure timeline

September 9, 2020 CVE published
September 16, 2024 Record updated