Product:
Cortex XDR Microsoft 365 Defender Pack
Summary
A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in exposure of user credentials in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these credentials are exposed to recipients of the application logs.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 2.4 | CVE-2025-4234 |
Exploitation
To exploit this vulnerability, an attacker with local access to the system can view the application logs that contain sensitive user credentials. Since these logs are typically intended for troubleshooting and are accessible to local users, an attacker can leverage this access to extract the exposed credentials.
Affected Products
- Cortex XDR Microsoft 365 Defender Pack: Exposes user credentials in application logs, which can be accessed by local users.
Mitigation
To mitigate this vulnerability, it is recommended to restrict access to application logs and ensure that only authorized personnel can view them. Additionally, users should be educated on the importance of safeguarding their credentials and monitoring for any unauthorized access.