An information exposure through log file vulnerability exists where the password for the configured system proxy server for a PAN-OS appliance may be displayed in cleartext when using the CLI in Palo Alto Networks PAN-OS software. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.17; PAN-OS 9.0 versions earlier than PAN-OS 9.0.11; PAN-OS 9.1 versions earlier than PAN-OS 9.1.2.
The product writes sensitive information to a log file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pan-os | Paloaltonetworks | 8.1.0 (including) | 8.1.17 (excluding) |
| Pan-os | Paloaltonetworks | 9.0.0 (including) | 9.0.11 (excluding) |
| Pan-os | Paloaltonetworks | 9.1.0 (including) | 9.1.2 (excluding) |