CVE-2025-4234 - CVE House

Back to Database

Status published Low CVE-2025-4234

Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials

2.4 CVSS

Vulnerability Description

A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in exposure of user credentials in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these credentials are exposed to recipients of the application logs.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-4234

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

RC

References

https://security.paloaltonetworks.com/CVE-2025-4234

More from Palo Alto Networks

View All →

PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets

Prisma Browser: Sensitive Information Disclosure Vulnerability in Prisma Browser

Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma Browser

Prisma Browser: Insufficient Validation of Untrusted Input Vulnerability in Prisma Browser

PAN-OS: Improper Neutralization of Input in the Management Web Interface

Affected Vendor

Palo Alto Networks

View all reports →

Affected Software

Cortex XDR Microsoft 365 Defender Pack

Vulnerable Versions:

4.6.0

Timeline

Official Publish: September 12th, 2025

Last Modified: February 26th, 2026

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1005 Data from Local System

T1552 Unsecured Credentials

Credential Access

T1555 Credentials from Password Stores

Credential Access

T1078 Valid Accounts

T1562 Impair Defenses

Defense Evasion