CVE-2025-0138

CVE-2025-0138 affects Palo Alto Networks Prisma Cloud Compute Edition. Web sessions in the Compute Edition web interface do not expire when users are deleted, allowing potential unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected. CVSS-like metrics indicate low overall...

CVE-2025-0138 Prisma Cloud Compute Edition: Insufficient Session Expiration Vulnerability in the Web Interface

Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible to unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected by this issue...

PT-2025-21214 · Palo Alto Networks · Palo Alto Networks Prisma Cloud Compute Edition

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Prisma Cloud Compute Edition affected versions not specified Description: The issue arises because web sessions in the web interface of Palo Alto Networks Prisma Cloud Compute Edition do not expire when users are deleted...