An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://security.paloaltonetworks.com/CVE-2025-4228 |
![]() ![]() |
History
Fri, 13 Jun 2025 14:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Thu, 12 Jun 2025 23:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root. | |
Title | Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability | |
Weaknesses | CWE-266 | |
References |
| |
Metrics |
cvssV4_0
|

Status: PUBLISHED
Assigner: palo_alto
Published: 2025-06-12T23:41:37.071Z
Updated: 2025-06-14T03:56:20.140Z
Reserved: 2025-05-02T19:10:41.205Z
Link: CVE-2025-4228

Updated: 2025-06-13T14:04:29.938Z

Status : Received
Published: 2025-06-13T00:15:23.233
Modified: 2025-06-13T00:15:23.233
Link: CVE-2025-4228

No data.