Skip to content
CVE PROGRAM SOURCE RECORD2.0 Low

CVE-2025-0138

Prisma Cloud Compute Edition: Insufficient Session Expiration Vulnerability in the Web Interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible to unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected by this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Prisma Cloud Compute Edition

Default version status: unaffected

  • 1 to < 34.01.129affected

Palo Alto Networks Compute in Prisma Cloud Enterprise Edition

Default version status: unaffected

  • Allunaffected

References