CVE: CVE-2025-0129
An improper exception check in Palo Alto Networks Prisma Access Browser allows a low privileged user to prevent Prisma Access Browser from applying its Policy Rules. This enables the user to use Prisma Access Browser without any restrictions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2025-0129 |
Exploitation
To exploit this vulnerability, an attacker with low privileges can manipulate the Prisma Access Browser to bypass policy rules, allowing unrestricted access to its functionalities. This can be achieved by executing local commands that trigger the improper exception handling.
Affected Products
- Prisma Access Browser: A cloud-delivered security service that provides secure access to applications and data.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Palo Alto Networks for Prisma Access Browser. Additionally, monitoring user privileges and enforcing strict access controls can help prevent exploitation.
References