CVE-2025-0138CWE-613

Prisma Cloud Compute Edition: Insufficient Session Expiration Vulnerability in the Web Interface

Low · published May 14, 2025

CVSS v4.0
2.0
EPSS
0%
Percentile
29.2
In the wild
Unconfirmed
What it is

Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible to unauthorized access.

Compute in Prisma Cloud Enterprise Edition is not affected by this issue.

The record
Technical detail
CVSS v4.0
2.0 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber
EPSS
0.00366 · 29.2th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2025-05-14T18:10Z
EPSS history
Timeline
  • 14 MAY 18:10Z
    Prisma Cloud Compute Edition: Insufficient Session Expiration Vulnerability in the Web Interface
    cvelistv5