Insufficient Cache Implementation in Palo Alto Networks Prisma Access Browser
CVE-2025-4233
5.1MEDIUM
Key Information:
- Vendor
Palo Alto Networks
- Status
- Vendor
- CVE Published:
- 12 June 2025
Badges
👾 Exploit Exists
What is CVE-2025-4233?
An inadequately implemented cache vulnerability in the Palo Alto Networks Prisma Access Browser allows users to circumvent specific data control policies, potentially leading to unauthorized access to sensitive information. This flaw emphasizes the need for robust cache management and security measures to protect data integrity and prevent misuse.
Affected Version(s)
Prisma Access Browser 0 < 136.24.1.93
References
CVSS V4
Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved
Credit
Palo Alto Networks thanks Tan Inn Fung, Yu Ann Ong, Zhang Bosen from the GovTech Cybersecurity Group for discovering and reporting this issue.