PT-2025-21209 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Broker Vm

Bartosz Chałek + 1 · Published 2025-05-14 · Updated 2025-05-15 · CVE-2025-0132

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Broker VM (affected versions not specified)

Description: A missing authentication issue allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2025-05706

CVE-2025-0132

Affected Products

Palo Alto Networks Cortex Xdr Broker Vm

References · 6

• https://bdu.fstec.ru/vul/2025-05706 · Security Note
• https://security.paloaltonetworks.com/CVE-2025-0132 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0132 · Security Note
• https://reddit.com/r/paloaltonetworks/comments/1kmtnvm/11_new_security_advisories_may_14_2025 · Reddit Post
• https://twitter.com/CVEnew/status/1922765604085432526 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1922830770424410224 · Twitter Post