What is CVE-2025-0138?

CVE-2025-0138 is a security advisory published by Palo Alto Networks Security Advisories with Low severity. CVE-2025-0138 Prisma Cloud Compute Edition: Insufficient Session Expiration Vulnerability in the Web Interface

Which CVE IDs does CVE-2025-0138 cover?

CVE-2025-0138 covers the following CVE IDs: CVE-2025-0138. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2025-0138?

CVE-2025-0138 affects 2 products, including: Prisma Cloud Compute Edition; Compute in Prisma Cloud Enterprise Edition.

CVE-2025-0138Low

CVE-2025-0138 Prisma Cloud Compute Edition: Insufficient Session Expiration Vulnerability in the Web Interface

Vendor

Palo Alto Networks Security Advisories

Published

May 14, 2025

Last Modified

June 23, 2025

🔗 CVE IDs covered (1)

CVE-2025-0138 →

📋 Description

Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible to unauthorized access. Compute in Prisma Cloud Enterprise Edition is not affected by this issue.

🎯 Affected products2

Prisma Cloud Compute Edition
Compute in Prisma Cloud Enterprise Edition

✅ Remediation

This issue is fixed in Prisma Cloud Compute Edition 34.01.129, and all later Prisma Cloud Compute Edition versions. Workarounds and mitigations: No workaround or mitigation is available.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2025-0138