by Kastro
Paper/Archive/CVE-2025-0129

CVE-2025-0129

Palo Alto Networks Prisma Access Browser — Prisma Access Browser: Inappropriate control behavior in Prisma Access Browser

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
30
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 7.9.079 × 201.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An improper exception check in Palo Alto Networks Prisma Access Browser allows a low privileged user to prevent Prisma Access Browser from applying it's Policy Rules. This enables the user to use Prisma Access Browser without any restrictions.

Affected

ProductAffectedFixed inSource
Prisma Access Browser1 – < 132.83.3017.1132.83.3017.1CNA

Scores by source

palo_alto (CNA)9.3CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/AU:N/R:U/V:D/RE:L/U:Amber
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorysecurity.paloaltonetworks.com/PAN-SA-2025-0008