372 lines
17 KiB
JSON
372 lines
17 KiB
JSON
{
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.2",
|
|
"cveMetadata": {
|
|
"cveId": "CVE-2025-0134",
|
|
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
|
|
"state": "PUBLISHED",
|
|
"assignerShortName": "palo_alto",
|
|
"dateReserved": "2024-12-20T23:23:34.744Z",
|
|
"datePublished": "2025-05-14T18:07:54.706Z",
|
|
"dateUpdated": "2026-02-26T18:28:08.148Z"
|
|
},
|
|
"containers": {
|
|
"cna": {
|
|
"affected": [
|
|
{
|
|
"cpes": [
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:26.100.10:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:26.100.3:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:26.0.119:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:26.0.116:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:25.100.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:25.0.44:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:24.100.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:24.4.7:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:24.2.8:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:24.5.1:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:23.100.2:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:23.0.35:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:23.0.33:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:22.0.35:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:22.0.32:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:21.5.4:*:*:*:*:*:*:*",
|
|
"cpe:2.3:a:paloaltonetworks:cortex_xdr_broker_vm:20.9.1:*:*:*:*:*:*:*"
|
|
],
|
|
"defaultStatus": "unaffected",
|
|
"product": "Cortex XDR Broker VM",
|
|
"vendor": "Palo Alto Networks",
|
|
"versions": [
|
|
{
|
|
"changes": [
|
|
{
|
|
"at": "26.0.119",
|
|
"status": "unaffected"
|
|
}
|
|
],
|
|
"lessThan": "26.0.119",
|
|
"status": "affected",
|
|
"version": "26.0.0",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"lang": "en",
|
|
"supportingMedia": [
|
|
{
|
|
"base64": false,
|
|
"type": "text/html",
|
|
"value": "No special configuration is required to be affected by this issue."
|
|
}
|
|
],
|
|
"value": "No special configuration is required to be affected by this issue."
|
|
}
|
|
],
|
|
"credits": [
|
|
{
|
|
"lang": "en",
|
|
"type": "finder",
|
|
"value": "Christiaan van Aken"
|
|
}
|
|
],
|
|
"datePublic": "2025-05-14T16:00:00.000Z",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"supportingMedia": [
|
|
{
|
|
"base64": false,
|
|
"type": "text/html",
|
|
"value": "A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM."
|
|
}
|
|
],
|
|
"value": "A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM."
|
|
}
|
|
],
|
|
"exploits": [
|
|
{
|
|
"lang": "en",
|
|
"supportingMedia": [
|
|
{
|
|
"base64": false,
|
|
"type": "text/html",
|
|
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
|
|
}
|
|
],
|
|
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
|
|
}
|
|
],
|
|
"impacts": [
|
|
{
|
|
"capecId": "CAPEC-242",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CAPEC-242 Code Injection"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"metrics": [
|
|
{
|
|
"cvssV4_0": {
|
|
"Automatable": "NO",
|
|
"Recovery": "USER",
|
|
"Safety": "NEGLIGIBLE",
|
|
"attackComplexity": "LOW",
|
|
"attackRequirements": "NONE",
|
|
"attackVector": "NETWORK",
|
|
"baseScore": 6.5,
|
|
"baseSeverity": "MEDIUM",
|
|
"privilegesRequired": "LOW",
|
|
"providerUrgency": "AMBER",
|
|
"subAvailabilityImpact": "HIGH",
|
|
"subConfidentialityImpact": "HIGH",
|
|
"subIntegrityImpact": "HIGH",
|
|
"userInteraction": "NONE",
|
|
"valueDensity": "CONCENTRATED",
|
|
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/S:N/AU:N/R:U/V:C/RE:M/U:Amber",
|
|
"version": "4.0",
|
|
"vulnAvailabilityImpact": "LOW",
|
|
"vulnConfidentialityImpact": "LOW",
|
|
"vulnIntegrityImpact": "LOW",
|
|
"vulnerabilityResponseEffort": "MODERATE"
|
|
},
|
|
"format": "CVSS",
|
|
"scenarios": [
|
|
{
|
|
"lang": "en",
|
|
"value": "GENERAL"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"problemTypes": [
|
|
{
|
|
"descriptions": [
|
|
{
|
|
"cweId": "CWE-94",
|
|
"description": "CWE-94 Improper Control of Generation of Code ('Code Injection')",
|
|
"lang": "en",
|
|
"type": "CWE"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"providerMetadata": {
|
|
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
|
|
"shortName": "palo_alto",
|
|
"dateUpdated": "2025-05-14T18:07:54.706Z"
|
|
},
|
|
"references": [
|
|
{
|
|
"tags": [
|
|
"vendor-advisory"
|
|
],
|
|
"url": "https://security.paloaltonetworks.com/CVE-2025-0134"
|
|
}
|
|
],
|
|
"solutions": [
|
|
{
|
|
"lang": "eng",
|
|
"supportingMedia": [
|
|
{
|
|
"base64": false,
|
|
"type": "text/html",
|
|
"value": "This issue is fixed in Cortex XDR Broker VM 26.0.119, and all later Cortex XDR Broker VM versions. <br><ul><li>If you enabled automatic upgrades for Broker VM, then no action is required at this time.</li><li>If you did not enable automatic upgrades, then we recommend you do so for Broker VM to ensure that you always have the latest security patches installed in your software.</li></ul>"
|
|
}
|
|
],
|
|
"value": "This issue is fixed in Cortex XDR Broker VM 26.0.119, and all later Cortex XDR Broker VM versions. \n * If you enabled automatic upgrades for Broker VM, then no action is required at this time.\n * If you did not enable automatic upgrades, then we recommend you do so for Broker VM to ensure that you always have the latest security patches installed in your software."
|
|
}
|
|
],
|
|
"source": {
|
|
"defect": [
|
|
"CRTX-105741"
|
|
],
|
|
"discovery": "UNKNOWN"
|
|
},
|
|
"timeline": [
|
|
{
|
|
"lang": "en",
|
|
"time": "2025-05-14T16:00:00.000Z",
|
|
"value": "Initial Publication"
|
|
}
|
|
],
|
|
"title": "Cortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VM",
|
|
"workarounds": [
|
|
{
|
|
"lang": "en",
|
|
"supportingMedia": [
|
|
{
|
|
"base64": false,
|
|
"type": "text/html",
|
|
"value": "There are no known workarounds or mitigations for this issue."
|
|
}
|
|
],
|
|
"value": "There are no known workarounds or mitigations for this issue."
|
|
}
|
|
],
|
|
"x_affectedList": [
|
|
"Cortex XDR Broker VM 26.0.0",
|
|
"Cortex XDR Broker VM 26.0.1",
|
|
"Cortex XDR Broker VM 26.0.2",
|
|
"Cortex XDR Broker VM 26.0.3",
|
|
"Cortex XDR Broker VM 26.0.4",
|
|
"Cortex XDR Broker VM 26.0.5",
|
|
"Cortex XDR Broker VM 26.0.6",
|
|
"Cortex XDR Broker VM 26.0.7",
|
|
"Cortex XDR Broker VM 26.0.8",
|
|
"Cortex XDR Broker VM 26.0.9",
|
|
"Cortex XDR Broker VM 26.0.10",
|
|
"Cortex XDR Broker VM 26.0.11",
|
|
"Cortex XDR Broker VM 26.0.12",
|
|
"Cortex XDR Broker VM 26.0.13",
|
|
"Cortex XDR Broker VM 26.0.14",
|
|
"Cortex XDR Broker VM 26.0.15",
|
|
"Cortex XDR Broker VM 26.0.16",
|
|
"Cortex XDR Broker VM 26.0.17",
|
|
"Cortex XDR Broker VM 26.0.18",
|
|
"Cortex XDR Broker VM 26.0.19",
|
|
"Cortex XDR Broker VM 26.0.20",
|
|
"Cortex XDR Broker VM 26.0.21",
|
|
"Cortex XDR Broker VM 26.0.22",
|
|
"Cortex XDR Broker VM 26.0.23",
|
|
"Cortex XDR Broker VM 26.0.24",
|
|
"Cortex XDR Broker VM 26.0.25",
|
|
"Cortex XDR Broker VM 26.0.26",
|
|
"Cortex XDR Broker VM 26.0.27",
|
|
"Cortex XDR Broker VM 26.0.28",
|
|
"Cortex XDR Broker VM 26.0.29",
|
|
"Cortex XDR Broker VM 26.0.30",
|
|
"Cortex XDR Broker VM 26.0.31",
|
|
"Cortex XDR Broker VM 26.0.32",
|
|
"Cortex XDR Broker VM 26.0.33",
|
|
"Cortex XDR Broker VM 26.0.34",
|
|
"Cortex XDR Broker VM 26.0.35",
|
|
"Cortex XDR Broker VM 26.0.36",
|
|
"Cortex XDR Broker VM 26.0.37",
|
|
"Cortex XDR Broker VM 26.0.38",
|
|
"Cortex XDR Broker VM 26.0.39",
|
|
"Cortex XDR Broker VM 26.0.40",
|
|
"Cortex XDR Broker VM 26.0.41",
|
|
"Cortex XDR Broker VM 26.0.42",
|
|
"Cortex XDR Broker VM 26.0.43",
|
|
"Cortex XDR Broker VM 26.0.44",
|
|
"Cortex XDR Broker VM 26.0.45",
|
|
"Cortex XDR Broker VM 26.0.46",
|
|
"Cortex XDR Broker VM 26.0.47",
|
|
"Cortex XDR Broker VM 26.0.48",
|
|
"Cortex XDR Broker VM 26.0.49",
|
|
"Cortex XDR Broker VM 26.0.50",
|
|
"Cortex XDR Broker VM 26.0.51",
|
|
"Cortex XDR Broker VM 26.0.52",
|
|
"Cortex XDR Broker VM 26.0.53",
|
|
"Cortex XDR Broker VM 26.0.54",
|
|
"Cortex XDR Broker VM 26.0.55",
|
|
"Cortex XDR Broker VM 26.0.56",
|
|
"Cortex XDR Broker VM 26.0.57",
|
|
"Cortex XDR Broker VM 26.0.58",
|
|
"Cortex XDR Broker VM 26.0.59",
|
|
"Cortex XDR Broker VM 26.0.60",
|
|
"Cortex XDR Broker VM 26.0.61",
|
|
"Cortex XDR Broker VM 26.0.62",
|
|
"Cortex XDR Broker VM 26.0.63",
|
|
"Cortex XDR Broker VM 26.0.64",
|
|
"Cortex XDR Broker VM 26.0.65",
|
|
"Cortex XDR Broker VM 26.0.66",
|
|
"Cortex XDR Broker VM 26.0.67",
|
|
"Cortex XDR Broker VM 26.0.68",
|
|
"Cortex XDR Broker VM 26.0.69",
|
|
"Cortex XDR Broker VM 26.0.70",
|
|
"Cortex XDR Broker VM 26.0.71",
|
|
"Cortex XDR Broker VM 26.0.72",
|
|
"Cortex XDR Broker VM 26.0.73",
|
|
"Cortex XDR Broker VM 26.0.74",
|
|
"Cortex XDR Broker VM 26.0.75",
|
|
"Cortex XDR Broker VM 26.0.76",
|
|
"Cortex XDR Broker VM 26.0.77",
|
|
"Cortex XDR Broker VM 26.0.78",
|
|
"Cortex XDR Broker VM 26.0.79",
|
|
"Cortex XDR Broker VM 26.0.80",
|
|
"Cortex XDR Broker VM 26.0.81",
|
|
"Cortex XDR Broker VM 26.0.82",
|
|
"Cortex XDR Broker VM 26.0.83",
|
|
"Cortex XDR Broker VM 26.0.84",
|
|
"Cortex XDR Broker VM 26.0.85",
|
|
"Cortex XDR Broker VM 26.0.86",
|
|
"Cortex XDR Broker VM 26.0.87",
|
|
"Cortex XDR Broker VM 26.0.88",
|
|
"Cortex XDR Broker VM 26.0.89",
|
|
"Cortex XDR Broker VM 26.0.90",
|
|
"Cortex XDR Broker VM 26.0.91",
|
|
"Cortex XDR Broker VM 26.0.92",
|
|
"Cortex XDR Broker VM 26.0.93",
|
|
"Cortex XDR Broker VM 26.0.94",
|
|
"Cortex XDR Broker VM 26.0.95",
|
|
"Cortex XDR Broker VM 26.0.96",
|
|
"Cortex XDR Broker VM 26.0.97",
|
|
"Cortex XDR Broker VM 26.0.98",
|
|
"Cortex XDR Broker VM 26.0.99",
|
|
"Cortex XDR Broker VM 26.0.100",
|
|
"Cortex XDR Broker VM 26.0.101",
|
|
"Cortex XDR Broker VM 26.0.102",
|
|
"Cortex XDR Broker VM 26.0.103",
|
|
"Cortex XDR Broker VM 26.0.104",
|
|
"Cortex XDR Broker VM 26.0.105",
|
|
"Cortex XDR Broker VM 26.0.106",
|
|
"Cortex XDR Broker VM 26.0.107",
|
|
"Cortex XDR Broker VM 26.0.108",
|
|
"Cortex XDR Broker VM 26.0.109",
|
|
"Cortex XDR Broker VM 26.0.110",
|
|
"Cortex XDR Broker VM 26.0.111",
|
|
"Cortex XDR Broker VM 26.0.112",
|
|
"Cortex XDR Broker VM 26.0.113",
|
|
"Cortex XDR Broker VM 26.0.114",
|
|
"Cortex XDR Broker VM 26.0.115",
|
|
"Cortex XDR Broker VM 26.0.116",
|
|
"Cortex XDR Broker VM 26.0.117",
|
|
"Cortex XDR Broker VM 26.0.118"
|
|
],
|
|
"x_generator": {
|
|
"engine": "Vulnogram 0.1.0-dev"
|
|
}
|
|
},
|
|
"adp": [
|
|
{
|
|
"metrics": [
|
|
{
|
|
"other": {
|
|
"type": "ssvc",
|
|
"content": {
|
|
"id": "CVE-2025-0134",
|
|
"role": "CISA Coordinator",
|
|
"options": [
|
|
{
|
|
"Exploitation": "none"
|
|
},
|
|
{
|
|
"Automatable": "no"
|
|
},
|
|
{
|
|
"Technical Impact": "total"
|
|
}
|
|
],
|
|
"version": "2.0.3",
|
|
"timestamp": "2025-05-15T04:02:10.628623Z"
|
|
}
|
|
}
|
|
}
|
|
],
|
|
"title": "CISA ADP Vulnrichment",
|
|
"providerMetadata": {
|
|
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
|
"shortName": "CISA-ADP",
|
|
"dateUpdated": "2026-02-26T18:28:08.148Z"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
} |