5.3
Moyenne
CVE-2025-2184 A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share…
Description
A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share identical default credentials for internal services. Users knowing these default credentials could access internal services on other Broker VM installations. The attacker must have network access to the Broker VM to exploit this issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cortex XDR Broker VM 28.0 | 28.0.0 → < 28.0.52 | 28.0.52 |
Références
- security.paloaltonetworks.com security.paloaltonetworks.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cortex XDR Broker VM
Les 9 CVE de Cortex XDR Broker VM →
CVE-2026-0304
A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low…
4.8
Moyenne
CVE-2026-0276
A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a locally authenticated user to…
1.1
Faible
CVE-2026-0231
An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to…
5.7
Moyenne
CVE-2025-4228
Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability
4.6
Moyenne