← Back

CVE-2025-4614

nvd nist
Published: Oct 9, 2025Modified: Jun 17, 2026

JSON object

Loading...
4.8
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Amber
Show more
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:AmberShow less
Source: psirt@paloaltonetworks.com (Secondary)

Description

An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked.   The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. Cloud NGFW and Prisma® Access are not affected by this vulnerability.

Affected (15)

Paloaltonetworks
1 product
Pan Os
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Paloaltonetworks
Pan Os
From 10.2.0 to 10.2.17
Pan Os
From 11.1.0 to 11.1.6
Pan Os
From 11.2.0 to 11.2.8
Pan Os
Version 11.1.6
Pan Os
Version 11.1.6 h10
Pan Os
Version 11.1.6 h14
Pan Os
Version 11.1.6 h17
Pan Os
Version 11.1.6 h19
Pan Os
Version 11.1.6 h1
Pan Os
Version 11.1.6 h20
Pan Os
Version 11.1.6 h3
Pan Os
Version 11.1.6 h4
Pan Os
Version 11.1.6 h5
Pan Os
Version 11.1.6 h6
Pan Os
Version 11.1.6 h7

Related CWEs

CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

References (1)

Source: psirt@paloaltonetworks.com
Vendor Advisory

Timeline

No history available yet.