Information Exposure Vulnerability in Palo Alto Networks User-ID Credential Agent

CVE-2025-4235

What is CVE-2025-4235?

A vulnerability in the Palo Alto Networks User-ID Credential Agent can lead to unauthorized exposure of service account credentials when configured incorrectly. This weakness can allow unprivileged Domain Users to exploit the permissions of the affected account, potentially leading to privilege escalation. Depending on the configuration, impacts can range from service disruptions of the User-ID Credential Agent, which may disable critical credential protection features, to significant security breaches involving server control and domain manipulation. Proper configuration and monitoring are essential to mitigate the risks associated with this vulnerability.

References