Palo Alto Networks Cortex XDR Broker VM Information Disclosure Vulnerability

A vulnerability allowing information disclosure has been identified in Palo Alto Networks Cortex XDR Broker VM versions 30.0.0 prior to 30.0.49. This vulnerability allows an authenticated user with network access to the Broker VM to access and modify sensitive information. The issue can be exploited by initiating a live terminal session through the Cortex UI and altering any configuration setting.

Impact

Exploitation of this vulnerability could lead to unauthorized access and modification of sensitive information within the Cortex XDR Broker VM.

Remediation

Users can upgrade to Cortex XDR Broker VM version 30.0.49 or later to address this vulnerability. If automatic upgrades are not enabled, it is recommended to enable them to ensure the latest security patches are applied.