Description
A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in exposure of user credentials in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these credentials are exposed to recipients of the application logs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | Cortex XDR Microsoft 365 Defender Pack | 4.6.0 – < 11.0.2-133 | 11.0.2-133 |
Advisories 1
- WID-SEC-2025-2035 Palo Alto Networks Cortex XDR: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Sep 11, 2025
References
- https://security.paloaltonetworks.com/CVE-2025-4234 vendor-advisory