CVE-2025-0129CWE-754

Prisma Access Browser: Inappropriate control behavior in Prisma Access Browser

Critical · published April 11, 2025

CVSS v4.0
9.3
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

An improper exception check in Palo Alto Networks Prisma Access Browser allows a low privileged user to prevent Prisma Access Browser from applying it's Policy Rules. This enables the user to use Prisma Access Browser without any restrictions.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/AU:N/R:U/V:D/RE:L/U:Amber
EPSS
0.00183 · 7.5th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2025-04-11T22:25Z
EPSS history
Timeline
  • 11 APR 22:25Z
    Prisma Access Browser: Inappropriate control behavior in Prisma Access Browser
    cvelistv5