CVE-2025-4617
BaseFortify
Publication date: 2025-11-14
Last updated on: 2025-11-14
Assigner: Palo Alto Networks, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| palo_alto_networks | prisma_browser | 4.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-424 | The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an insufficient policy enforcement issue in Palo Alto Networks Prisma® Browser on Windows. It allows a locally authenticated non-admin user to bypass the browser's screenshot control feature, meaning the user can take screenshots even when the browser is supposed to prevent it.
How can this vulnerability impact me? :
The vulnerability could allow unauthorized users with local access to capture sensitive information displayed in the Prisma Browser by bypassing screenshot restrictions. This could lead to data leakage or exposure of confidential information.
What immediate steps should I take to mitigate this vulnerability?
Enable the browser self-protection feature in Palo Alto Networks Prisma® Browser on Windows to mitigate this vulnerability.