CNNVD-202509-1799 Information

CNNVD ID

CNNVD-202509-1799

CVE-2025-4235

  • CNNVD Published: 2025-09-12

Description (Chinese)

Palo Alto Networks User-ID Credential Agent是美国派拓网络(Palo Alto Networks)公司的一个具有收集用户身份与IP地址的对应关系功能的组件。 Palo Alto Networks User-ID Credential Agent存在安全漏洞,该漏洞源于特定非默认配置下可能暴露服务账户密码,可能导致权限提升。

Description (English)

Palo Alto Networks User-ID Creative Agent is a component of Palo Alto Networks in the United States with a matching function to collect user identities and IP addresses. Palo Alto Networks User-ID CredentAgent has a security loophole, which arises from the possibility of exposing service account passwords under a specific non-default configuration, which may lead to enhanced privileges.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

派拓网络

Published

2025-09-12

Last Modified

2026-02-24

References

https://security.paloaltonetworks.com/CVE-2025-4235

Patch

https://security.paloaltonetworks.com/CVE-2025-4235

Share on: