Exposure of Sensitive System Information to an Unauthorized Control Sphere in Palo Alto PAN-OS - CVE-2025-4614

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU116855

Exposure of Sensitive System Information to an Unauthorized Control Sphere in Palo Alto PAN-OS - CVE-2025-4614

Published: October 9, 2025


Vulnerability identifier: #VU116855
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2025-4614
CWE-ID: CWE-497
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vendor: Palo Alto Networks, Inc.
Affected software:
Palo Alto PAN-OS

Detailed vulnerability description

The vulnerability allows a remote user to gain access to sensitive information.

The vulnerability exists due to exposure of exposure of sensitive information. An authenticated administrator can view session tokens of users authenticated to the firewall web UI and use these tokens to impersonate such users. 


How to mitigate CVE-2025-4614

Install updates from vendor's website.

Sources