Product:
Prisma Browser
Summary
An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma Browser allows a locally authenticated non-admin user to revert the browser’s security controls. This can lead to potential security risks as the integrity of the browser’s security features can be compromised. The vulnerability is classified as having a low base score, indicating a lower severity level.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 1.1 | CVE-2025-4616 |
Exploitation
To exploit this vulnerability, an attacker with local access and non-admin privileges can manipulate untrusted input to bypass security controls within the Prisma Browser. This could involve crafting specific inputs that the browser fails to validate properly, allowing the attacker to revert security settings and potentially expose the system to further risks.
Affected Products
- Prisma Browser: Vulnerable to insufficient validation of untrusted input, allowing non-admin users to alter security controls.
Mitigation
To mitigate this vulnerability, it is recommended that users ensure they are using the latest version of Prisma Browser and apply any available security patches. Additionally, restricting local access to non-admin users can help prevent exploitation of this vulnerability.