A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files.
The attacker must have network access to the management interface (web, SSH, console, or telnet) and successfully authenticate to exploit this issue. You can greatly reduce the risk of this issue by restricting access to the management interface to only trusted users and internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .
This issue does not affect Cloud NGFW or Prisma Access.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://security.paloaltonetworks.com/CVE-2025-0115 |
Configurations
No configuration.
History
15 Apr 2026, 00:35
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) Una vulnerabilidad en el software PAN-OS de Palo Alto Networks permite que un administrador autenticado en la CLI de PAN-OS lea archivos arbitrarios. El atacante debe tener acceso de red a la interfaz de administración (web, SSH, consola o Telnet) y autenticarse correctamente para explotar este problema. Puede reducir considerablemente el riesgo de este problema restringiendo el acceso a la interfaz de administración únicamente a usuarios de confianza y direcciones IP internas, según nuestras directrices de implementación crítica recomendadas (https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431). Este problema no afecta a Cloud NGFW ni a Prisma Access. |
15 Mar 2025, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| Summary | (en) A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files. The attacker must have network access to the management interface (web, SSH, console, or telnet) and successfully authenticate to exploit this issue. You can greatly reduce the risk of this issue by restricting access to the management interface to only trusted users and internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access. |
12 Mar 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-12 19:15
Updated : 2026-04-15 00:35
NVD link : CVE-2025-0115
Mitre link : CVE-2025-0115
CVE.ORG link : CVE-2025-0115
JSON object : View
Products Affected
No product.
CWE
CWE-41
Improper Resolution of Path Equivalence