CVE-2025-0115

PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI

State: Published
Severity: 6.8 Medium
Published: Mar 12, 2025
Updated: Mar 17, 2025
Reserved: Dec 20, 2024

Description

A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files.

The attacker must have network access to the management interface (web, SSH, console, or telnet) and successfully authenticate to exploit this issue. You can greatly reduce the risk of this issue by restricting access to the management interface to only trusted users and internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .

This issue does not affect Cloud NGFW or Prisma Access.

Scores

CVSS	Score	Vector	Source
4.0	6.8 Medium	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Amber	palo_alto
4.0	5.6 Medium	CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Green	palo_alto

Weaknesses

CWE-41 Improper Resolution of Path Equivalence

Affected Products

Product	Versions
PAN-OSPalo Alto Networks	11.2.0 to before 11.2.3Affectedfrom 11.2.3Not affected 11.1.0 to before 11.1.5Affectedfrom 11.1.5Not affected 11.0.0 to before 11.0.6Affectedfrom 11.0.6Not affected 10.2.0 to before 10.2.11Affectedfrom 10.2.11Not affected 10.1.0 to before 10.1.14-h11Affectedfrom 10.1.14-h11Not affected
Cloud NGFWPalo Alto Networks	AllNot affected
Prisma AccessPalo Alto Networks	AllNot affected

References

https://security.paloaltonetworks.com/CVE-2025-0115vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.