2.0 Low

CVE-2025-0138 Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are…

Description

Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible to unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected by this issue.

Affected products and versions

Product	Affected versions	Fixed in
Prisma Cloud Compute Edition 1	1 → < 34.01.129	34.01.129
Compute in Prisma Cloud Enterprise Edition	Versions not published

Do you use Prisma Cloud Compute Edition?

Track this CVE Watch Prisma Cloud Compute Edition Check my SBOMs

www.cveye.io/en/cve/CVE-2025-0138

Timeline

Published May 14, 2025
Last modified June 23, 2025

References

security.paloaltonetworks.com security.paloaltonetworks.com

Track this CVE