CVE-2021-3037: Palo Alto Networks PAN-OS

Low severity, CVSS 2.3. EPSS: 0.3% chance of exploitation in the next 30 days.

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection details for a scheduled configuration export are logged in system logs. Logged information includes the cleartext username, password, and IP address used to export the PAN-OS configuration to the destination server.

Affected products

• Palo Alto Networks PAN-OS: from 8.1.0, before 8.1.19 (fixed in 8.1.19); from 9.0.0, before 9.0.13 (fixed in 9.0.13); from 9.1.0, before 9.1.4 (fixed in 9.1.4)

Published 2021-04-20. Last modified 2026-06-17.