CVE-2025-0106

A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate files on the host filesystem.

Score

CVSS 4.0 6.9 Medium

Status

Analyzed - psirt@paloaltonetworks.com

Published

2025-01-11

Last modified

2025-01-13

Weaknesses

CWE-155

Affected products

• Cloud Ngfw (Palo Alto Networks)
• Expedition (Palo Alto Networks)
• Pan-os (Palo Alto Networks)
• Panorama (Palo Alto Networks)
• Prisma Access (Palo Alto Networks)
• Expedition (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/PAN-SA-2025-0001