PT-2025-33024 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Broker Vm

Published 2025-03-10 · Updated 2026-03-12 · CVE-2025-2184

Positive Technologies · (AI Summary)

CVSS v4.0

5.3

Medium

AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR® Broker VM (affected versions not specified)

Description: A credential management flaw exists in Palo Alto Networks Cortex XDR® Broker VM where different Broker VM images share identical default credentials for internal services. An attacker with network access to the Broker VM could exploit this issue to access internal services on other Broker VM installations.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1392

Related Identifiers

BDU:2025-11013

CVE-2025-2184

Affected Products

Palo Alto Networks Cortex Xdr Broker Vm

References · 8

• https://security.paloaltonetworks.com/CVE-2025-2184 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11013 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-2184 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-2184 · Security Note
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-33024 · Note
• https://twitter.com/CymonSkinner/status/2032079732922007940 · Twitter Post
• https://t.me/cveNotify/132107 · Telegram Post
• https://twitter.com/CVEnew/status/1955683531503378842 · Twitter Post