CVE-2025-2184 — Cortex XDR Broker VM: Secrets Shared Across Multiple Broker VM Images

CVE-2025-2184

Cortex XDR Broker VM: Secrets Shared Across Multiple Broker VM Images PUBLISHED

Description (CNA)

A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share identical default credentials for internal services. Users knowing these default credentials could access internal services on other Broker VM installations. The attacker must have network access to the Broker VM to exploit this issue.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Cortex XDR Broker VM	affected 28.0.0 before 28.0.52

CWE

CWE-1392

References

https://security.paloaltonetworks.com/CVE-2025-2184

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.