CVE-2021-3039

An information exposure through log file vulnerability exists in the Palo Alto Networks Prisma Cloud Compute Console where a secret used to authorize the role of the authenticated user is logged to a debug log file. Authenticated Operator role and Auditor role users with access to the debug log files can use this secret to gain Administrator role access for their active session in Prisma Cloud Compute. Prisma Cloud Compute SaaS versions were automatically upgraded to the fixed release. This issue impacts all Prisma Cloud Compute versions earlier than Prisma Cloud Compute 21.04.412.

• CWE-532
• CWE-532

• https://security.paloaltonetworks.com/CVE-2021-3039Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2021-3039Vendor Advisory

Published

Jun 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3036An information exposure through log file vulnerability exist…4.4
• CVE-2021-30360Users have access to the directory where the installation re…7.8
• CVE-2021-30361The Check Point Gaia Portal's GUI Clients allowed authentica…6.7
• CVE-2021-30369Rejected reason: Was determined not a vulnerability.
• CVE-2021-3037An information exposure through log file vulnerability exist…2.3
• CVE-2021-3038A denial-of-service (DoS) vulnerability in Palo Alto Network…5.5
• CVE-2021-3040An unsafe deserialization vulnerability in Bridgecrew Checko…7.2
• CVE-2021-3041A local privilege escalation vulnerability exists in the Pal…7.8
• CVE-2021-3042A local privilege escalation (PE) vulnerability exists in th…7.8
• CVE-2021-3043A reflected cross-site scripting (XSS) vulnerability exists …4.8
• CVE-2021-3044An improper authorization vulnerability in Palo Alto Network…9.8
• CVE-2021-3045An OS command argument injection vulnerability in the Palo A…4.9