CVE-2021-3032

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where configuration secrets for the “http”, “email”, and “snmptrap” v3 log forwarding server profiles can be logged to the logrcvr.log system log. Logged information may include up to 1024 bytes of the configuration including the username and password in an encrypted form and private keys used in any certificate profiles set for log forwarding server profiles. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.18; PAN-OS 9.0 versions earlier than PAN-OS 9.0.12; PAN-OS 9.1 versions earlier than PAN-OS 9.1.4; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.

• CWE-532
• CWE-532

• https://security.paloaltonetworks.com/CVE-2021-3032Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2021-3032Vendor Advisory

Published

Jan 13, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30314Lack of validation for third party application accessing the…5.5
• CVE-2021-30315Improper handling of sensor HAL structure in absence of sens…7.8
• CVE-2021-30316Possible out of bound memory access due to improper boundary…7.8
• CVE-2021-30317Improper validation of program headers containing ELF metada…7.8
• CVE-2021-30318Improper validation of input when provisioning the HDCP key …7.8
• CVE-2021-30319Possible integer overflow due to improper validation of comm…7.8
• CVE-2021-30321Possible buffer overflow due to lack of parameter length che…9.8
• CVE-2021-30322Possible out of bounds write due to improper validation of n…7.8
• CVE-2021-30323Improper validation of maximum size of data write to EFS fil…7.8
• CVE-2021-30324Possible out of bound write due to lack of boundary check fo…6.7
• CVE-2021-30325Possible out of bound access of DCI resources due to lack of…6.7
• CVE-2021-30326Possible assertion due to improper size validation while pro…7.5