CVE-2021-3036

An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where secrets in PAN-OS XML API requests are logged in cleartext to the web server logs when the API is used incorrectly. This vulnerability applies only to PAN-OS appliances that are configured to use the PAN-OS XML API and exists only when a client includes a duplicate API parameter in API requests. Logged information includes the cleartext username, password, and API key of the administrator making the PAN-OS XML API request.

• CWE-532
• CWE-532

• https://security.paloaltonetworks.com/CVE-2021-3036Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2021-3036Vendor Advisory

Published

Apr 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30354Amazon Kindle e-reader prior to and including version 5.13.4…8.6
• CVE-2021-30355Amazon Kindle e-reader prior to and including version 5.13.4…8.6
• CVE-2021-30356A denial of service vulnerability was reported in Check Poin…8.1
• CVE-2021-30357SSL Network Extender Client for Linux before build 800008302…5.3
• CVE-2021-30358Mobile Access Portal Native Applications who's path is defin…7.2
• CVE-2021-30359The Harmony Browse and the SandBlast Agent for Browsers inst…7.8
• CVE-2021-30360Users have access to the directory where the installation re…7.8
• CVE-2021-30361The Check Point Gaia Portal's GUI Clients allowed authentica…6.7
• CVE-2021-30369Rejected reason: Was determined not a vulnerability.
• CVE-2021-3037An information exposure through log file vulnerability exist…2.3
• CVE-2021-3038A denial-of-service (DoS) vulnerability in Palo Alto Network…5.5
• CVE-2021-3039An information exposure through log file vulnerability exist…3.8