CVE-2025-4614

09.10.2025, 19:15

An information disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked.

The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators.

Cloud NGFW and Prisma Access are not affected by this vulnerability.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	2.7 LOW	NETWORK	LOW	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
palo_alto	CNA	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 10%

Vendor	Product	Version
paloaltonetworks	pan-os	10.2.0 ≤ 𝑥 < 10.2.17
paloaltonetworks	pan-os	11.1.0 ≤ 𝑥 < 11.1.12
paloaltonetworks	pan-os	11.2.0 ≤ 𝑥 < 11.2.8

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-497 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
The application does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the application does.

References

https://security.paloaltonetworks.com/CVE-2025-4614