What is CVE-2020-2048?

CVE-2020-2048 is a security advisory published by Palo Alto Networks Security Advisories with Low severity. CVE-2020-2048 PAN-OS: System proxy passwords may be logged in clear text while viewing system state

Which CVE IDs does CVE-2020-2048 cover?

CVE-2020-2048 covers the following CVE IDs: CVE-2020-2048. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2020-2048?

CVE-2020-2048 affects 1 product, including: PAN-OS.

CVE-2020-2048Low

CVE-2020-2048 PAN-OS: System proxy passwords may be logged in clear text while viewing system state

Vendor

Palo Alto Networks Security Advisories

Published

November 11, 2020

Last Modified

November 11, 2020

🔗 CVE IDs covered (1)

CVE-2020-2048 →

📋 Description

An information exposure through log file vulnerability exists where the password for the configured system proxy server for a PAN-OS appliance may be displayed in cleartext when using the CLI in Palo Alto Networks PAN-OS software.

This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.17; PAN-OS 9.0 versions earlier than PAN-OS 9.0.11; PAN-OS 9.1 versions earlier than PAN-OS 9.1.2.

🎯 Affected products1

PAN-OS

✅ Remediation

This issue is fixed in PAN-OS 8.1.17, PAN-OS 9.0.11, PAN-OS 9.1.2, and all later PAN-OS versions. Workarounds and mitigations: This issue impacts the management web interface. You can mitigate the impact of this issue by following best practices for securing the interface. Please review the Best Practices for Securing Administrative Access in the PAN-OS technical documentation, available at https://docs.paloaltonetworks.com/best-practices.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2020-2048