CVE-2025-4618
BaseFortify
Publication date: 2025-11-14
Last updated on: 2025-11-14
Assigner: Palo Alto Networks, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| palo_alto_networks | prisma_browser | 4.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-316 | The product stores sensitive information in cleartext in memory. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a sensitive information disclosure issue in Palo Alto Networks Prisma® Browser. It allows a locally authenticated non-admin user to access sensitive data from the Prisma Browser, which they should not normally be able to retrieve. Enabling browser self-protection can help mitigate this vulnerability.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized disclosure of sensitive information to users who have local access but do not have administrative privileges. This could result in exposure of confidential data, potentially leading to privacy breaches or misuse of information.
What immediate steps should I take to mitigate this vulnerability?
Enable browser self-protection in Palo Alto Networks Prisma Browser to mitigate this vulnerability.