#VU116855 Exposure of Sensitive System Information to an Unauthorized Control Sphere in Palo Alto PAN-OS - CVE-2025-4614
Published: October 9, 2025
Vulnerability identifier: #VU116855
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2025-4614
CWE-ID: CWE-497
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Palo Alto PAN-OS
Palo Alto PAN-OS
Software vendor:
Palo Alto Networks, Inc.
Palo Alto Networks, Inc.
Description
The vulnerability allows a remote user to gain access to sensitive information.
The vulnerability exists due to exposure of exposure of sensitive information. An authenticated administrator can view session tokens of users authenticated to the firewall web UI and use these tokens to impersonate such users.
Remediation
Install updates from vendor's website.