Количество 3
Количество 3
CVE-2025-2184
A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share identical default credentials for internal services. Users knowing these default credentials could access internal services on other Broker VM installations. The attacker must have network access to the Broker VM to exploit this issue.
GHSA-5vh9-rp4f-879m
A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share identical default credentials for internal services. Users knowing these default credentials could access internal services on other Broker VM installations. The attacker must have network access to the Broker VM to exploit this issue.
BDU:2025-11013
Уязвимость компонента Broker VM платформы безопасности Cortex XDR, связанная с использованием учетных данных по умолчанию, позволяющая нарушителю получить доступ к внутренним службам на других виртуальных машинах
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-2184 A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share identical default credentials for internal services. Users knowing these default credentials could access internal services on other Broker VM installations. The attacker must have network access to the Broker VM to exploit this issue. | 0% Низкий | около 1 года назад | |
| GHSA-5vh9-rp4f-879m A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share identical default credentials for internal services. Users knowing these default credentials could access internal services on other Broker VM installations. The attacker must have network access to the Broker VM to exploit this issue. | 0% Низкий | около 1 года назад | |
 | BDU:2025-11013 Уязвимость компонента Broker VM платформы безопасности Cortex XDR, связанная с использованием учетных данных по умолчанию, позволяющая нарушителю получить доступ к внутренним службам на других виртуальных машинах | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу