Product:
User-ID Credential Agent
Summary
An information exposure vulnerability in the Palo Alto Networks User-ID Credential Agent can expose the service account password under specific non-default configurations. This allows an unprivileged Domain User to escalate privileges by exploiting the account’s permissions. The impact varies by configuration, affecting minimally privileged accounts and elevated accounts differently.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.2 | CVE-2025-4235 |
Exploitation
To exploit this vulnerability, an attacker with local access can manipulate the User-ID Credential Agent configurations to expose the service account password. By leveraging the permissions associated with the compromised account, the attacker can escalate privileges, disrupt operations, or even compromise the network through reconnaissance or client probing.
Affected Products
- Minimally Privileged Accounts: Enable disruption of User-ID Credential Agent operations, weakening network security policies.
- Elevated Accounts: Permit increased impacts, including server control and domain manipulation.
Mitigation
To mitigate this vulnerability, it is recommended to review and adjust the configurations of the User-ID Credential Agent to ensure that service account passwords are not exposed. Implementing strict access controls and monitoring for unauthorized changes can also help in reducing the risk of exploitation.