Vulnerability in PAN-OS Software Allows Unauthorized Data Access on Palo Alto Networks Firewalls

CVE-2025-0123

Summary

A vulnerability in Palo Alto Networks PAN-OS software permits unlicensed administrators to access clear-text data from packet captures of decrypted HTTP/2 streams on the firewall. This feature typically requires a specific license to ensure proper usage by authorized personnel. If the management interface is not adequately restricted, the risk of unauthorized access increases. While HTTP/1.1 data streams remain unaffected, organizations must maintain strict access controls and follow recommended guidelines to minimize exploitation risk.

References