Product:
Prisma Browser
Summary
A sensitive information disclosure vulnerability in Palo Alto Networks Prisma Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser. Browser self-protection should be enabled to mitigate this issue.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.4 | CVE-2025-4618 |
Exploitation
To exploit this vulnerability, an attacker with local access and non-admin privileges can leverage the weakness to access sensitive information stored within the Prisma Browser. This requires no special permissions beyond being a locally authenticated user, making it relatively easy for someone with physical access to the system to exploit.
Affected Products
- Prisma Browser: Vulnerable to sensitive information disclosure when self-protection is not enabled.
Mitigation
To mitigate this vulnerability, it is recommended to enable browser self-protection features. This will help prevent unauthorized access to sensitive data by limiting the ability of non-admin users to exploit the vulnerability.