STIGQter: STIG Summary: Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 01 Apr 2026:

Prisma Cloud Compute must not write sensitive data to event logs.

DISA Rule

SV-253541r961167_rule

Vulnerability Number

V-253541

Group Title

SRG-APP-000266-CTR-000625

Rule Version

CNTR-PC-000880

Severity

CAT II

CCI(s)

• CCI-001312 - Generates error messages that provide information necessary for corrective actions without revealing information that could be exploited.

Weight

10

Fix Recommendation

Navigate to Prisma Cloud Compute Console's >> Manage >> System >> General tab.

In the Log Scrubbing section, set "Automatically scrub secrets from runtime events" to "on" and click "Save".

Check Contents

Navigate to Prisma Cloud Compute Console's >> Manage >> System >> General tab.

Inspect the Log Scrubbing section. If "Automatically scrub secrets from runtime events" is "off", this is a finding.

Vulnerability Number

V-253541

Documentable

False

Rule Version

CNTR-PC-000880

Severity Override Guidance

Navigate to Prisma Cloud Compute Console's >> Manage >> System >> General tab.

Inspect the Log Scrubbing section. If "Automatically scrub secrets from runtime events" is "off", this is a finding.

Check Content Reference

M

Target Key

5473