CVE Vulnerabilities

CVE-2025-4617

Improper Protection of Alternate Path

Published: Nov 14, 2025 | Modified: Nov 14, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser.

Browser self-protection should be enabled to mitigate this issue.

Weakness

The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources.

Potential Mitigations

References