Product:
Prisma Access Agent
Summary
Multiple information disclosure vulnerabilities in Prisma Access Agent allow a local user to access sensitive configuration data and credentials. The vulnerabilities can lead to unauthorized access to sensitive information. The Prisma Access Agent on Linux, ChromeOS, Android, and iOS are not affected.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2026-0245 |
Exploitation
To exploit these vulnerabilities, a local user must have access to the system where the Prisma Access Agent is installed. By leveraging low privileges, the user can access sensitive configuration data and credentials stored by the application, potentially leading to further exploitation or unauthorized access to other systems.
Affected Products
- Prisma Access Agent: Vulnerable to information disclosure, allowing local users to access sensitive data.
Mitigation
To mitigate these vulnerabilities, it is recommended to restrict local access to systems running the Prisma Access Agent. Additionally, users should ensure that they are using the latest version of the software and apply any available security patches provided by Palo Alto Networks.