CVE-2025-2184CWE-1392

Cortex XDR Broker VM: Secrets Shared Across Multiple Broker VM Images

Medium · published August 13, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
6.5
In the wild
Unconfirmed
What it is

A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share identical default credentials for internal services. Users knowing these default credentials could access internal services on other Broker VM installations.

The attacker must have network access to the Broker VM to exploit this issue.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:Y/R:U/V:C/RE:M/U:Amber
EPSS
0.00174 · 6.5th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2025-08-13T17:05Z
EPSS history
Timeline
  • 13 AUG 17:05Z
    Cortex XDR Broker VM: Secrets Shared Across Multiple Broker VM Images
    cvelistv5