QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-0115

Back to search

CVE-2025-0115

Published: Mar 12, 2025

Modified: Mar 17, 2025

PUBLISHED

Description

A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files. The attacker must have network access to the management interface (web, SSH, console, or telnet) and successfully authenticate to exploit this issue. You can greatly reduce the risk of this issue by restricting access to the management interface to only trusted users and internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access.

VendorProductVersions

Palo Alto Networks

PAN-OS

affected
11.2.0 - < 11.2.3
affected
11.1.0 - < 11.1.5
affected
11.0.0 - < 11.0.6
affected
10.2.0 - < 10.2.11
affected
10.1.0 - < 10.1.14-h11

Palo Alto Networks

Cloud NGFW

unaffected
All

Palo Alto Networks

Prisma Access

unaffected
All

Weaknesses (CWE)

CWE-41

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now