CVE-2025-4233
Prisma Access Browser: Inappropriate implementation in Cache
Severity
Medium 5.1
CVSS 4.0
Exploited
Not listed
EPSS
0.002
7.5th percentile
Discovered by
Unknown
Published by the vendor
Published
Jun 12, 2025
Assigned by palo_alto
Description
An insufficient implementation of cache vulnerability in Palo Alto Networks Prisma® Access Browser enables users to bypass certain data control policies.
Weakness: CWE-524
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | Prisma Access | SASE / SSE / Secure Web | cna-assigner |
Vendor-reported affected versions (1)
- Palo Alto Networks · Prisma Access Browser
Credit
Palo Alto Networks thanks Tan Inn Fung, Yu Ann Ong, Zhang Bosen from the GovTech Cybersecurity Group for discovering and reporting this issue.
Vendor remediation
ProductSuggested Solution Prisma Access Browser Upgrade to 136.24.1.93 or later.