CVE-2021-3039

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Prisma Cloud Compute versions prior to 21.04.412

Description An information exposure through log file issue exists in the Palo Alto Networks Prisma Cloud Compute Console, where a secret used to authorize the role of the authenticated user is logged to a debug log file. Authenticated Operator role and Auditor role users with access to the debug log files can use this secret to gain Administrator role access for their active session in Prisma Cloud Compute.

Recommendations For Prisma Cloud Compute versions prior to 21.04.412, update to version 21.04.412 or later to resolve the issue. As a temporary workaround, consider restricting access to the debug log files to prevent authenticated Operator role and Auditor role users from gaining Administrator role access.