Product:
PAN-OS
Summary
An information disclosure vulnerability in Palo Alto Networks PAN-OS software allows an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may enable impersonation of users whose session tokens are leaked. The security risk is significantly reduced when CLI access is limited to a select group of administrators. Cloud NGFW and Prisma Access are not affected by this vulnerability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.8 | CVE-2025-4614 |
Exploitation
To exploit this vulnerability, an authenticated administrator with access to the firewall web UI can view the session tokens of other users. By obtaining these tokens, the administrator can impersonate the affected users, potentially gaining unauthorized access to sensitive information or functionalities within the system.
Affected Products
- PAN-OS: Vulnerable to session token exposure for authenticated users.
Mitigation
To mitigate this vulnerability, it is recommended to restrict CLI access to a limited group of trusted administrators. Additionally, monitoring and auditing of administrator activities can help detect any unauthorized access attempts.