CVE-2025-0138
Low
Description
Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible to unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected by this issue.
SeverityLow
CVSS2.0
Exploit probability—
Product
Paloaltonetworks Prisma Cloud Compute Edition
PublishedMay 14, 2025
First seenMay 14, 2025
Weakness typeCWE-613CWE-613
How to fix
Update
- paloaltonetworks prisma_cloud_compute_edition34.01.129 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paloaltonetworks prisma_cloud_compute_edition | 1 ≤ v < 34.01.129 | 34.01.129 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.