CVE-2025-2184mediumCWE-1392

CVE-2025-2184: falha de média gravidade em Palo Alto Networks Cortex XDR Broker VM

Cortex XDR Broker VM: Secrets Shared Across Multiple Broker VM Images

Publicada em

Seguir esta CVE+ Monitorar Cortex XDR Broker VM

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.2%
A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share identical default credentials for internal services. Users knowing these default credentials could access internal services on other Broker VM installations. The attacker must have network access to the Broker VM to exploit this issue.
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:Y/R:U/V:C/RE:M/U:Amber
Produtos afetados
Palo Alto Networks · Cortex XDR Broker VM
CVEs relacionadas — Palo Alto Networks Cortex XDR Broker VM

No mesmo produto, das mais perigosas para as menos.

CVE-2025-0119MEDIUMCortex XDR Broker VM: Authenticated Command Injection Vulnerability in Broker VMEPSS 0.6%CVE-2025-0134MEDIUMCortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VMEPSS 0.5%CVE-2025-0132MEDIUMCortex XDR Broker VM: Unauthenticated User Can Disable Internal ServicesEPSS 0.5%CVE-2026-0304MEDIUMCortex XDR Broker VM: Privilege Escalation VulnerabilityEPSS 0.3%CVE-2025-0113MEDIUMCortex XDR Broker VM: Unauthorized Access to Broker VM Docker ContainersEPSS 0.3%CVE-2025-4228MEDIUMCortex XDR Broker VM: Privilege Escalation (PE) VulnerabilityEPSS 0.2%