CVE-2025-4233 MEDIUM

CVE-2025-4233: Prisma Access Browser: Inappropriate implementation in Cache

Vendor Palo Alto Networks

Product Prisma Access Browser

Weakness CWE-524

Published June 12, 2025

Last update June 13, 2025

View on NVD All CVEs

CVSS base score

5.1/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

What the vulnerability does

01Description

An insufficient implementation of cache vulnerability in Palo Alto Networks Prisma® Access Browser enables users to bypass certain data control policies.

Key dates

02Disclosure timeline

June 12, 2025 CVE published

June 13, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-4233 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/524.html

Related vulnerabilities

04Related CVE

CVE-2025-5141 Core Privileged Access Manager (BoKS) Leakage of Sensitive Data via the Cache CVE-2024-41906 CVE-2024-45596 Directus's session is cached for OpenID and OAuth2 if `redirect` is not used CVE-2026-25540 Mastodon's signature-dependent ActivityPub collection responses cached under signature-independent keys (Web Cache Poisoning via `Rails.cache`) CVE-2025-64762 authkit-nextjs may let session cookies be cached in CDNs