CVE-2025-0129 Details
Description
An improper exception check in Palo Alto Networks Prisma Access Browser allows a low privileged user to prevent Prisma Access Browser from applying it's Policy Rules. This enables the user to use Prisma Access Browser without any restrictions.
A vulnerability exists in Palo Alto Networks Prisma Access Browser versions prior to 132.83.3017.1, allowing low-privileged users to bypass policy rules. This improper exception check enables unrestricted use of the browser, as it prevents the application of necessary restrictions. The issue does not require any special configuration to be exploited.
Users can upgrade to Prisma Access Browser version 132.83.3017.1 or later to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Apr 11, 2025CISA-ADP
Assessed Apr 14, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://security.paloaltonetworks.com/PAN-SA-2025-0008 | [email protected] | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-306 | Missing Authentication for Critical Function | CISA-ADP |
| CWE-754 | Improper Check for Unusual or Exceptional Conditions | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Palo Alto Networks Prisma Access Browser | All versions |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 13, 2025 | CVE Modified | [email protected] |
| May 21, 2025 | CVE Modified | [email protected] |
| Apr 15, 2025 | CVE Modified | CISA-ADP |
| Apr 11, 2025 | New CVE Received | [email protected] |