Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7wx2-94c7-j77h

Опубликовано: 13 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.3
CVSS3: 7.8

Описание

An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.

An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.

EPSS

Процентиль: 5%
0.0015
Низкий

7.3 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-424

Связанные уязвимости

CVSS3: 7.8
nvd
3 месяца назад

An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.

CVSS3: 7.3
fstec
3 месяца назад

Уязвимость браузера Prisma Browser операционных систем macOS, связанная с неправильной защитой альтернативного пути, позволяющая нарушителю обойти ограничения безопасности и выполнить произвольные команды

EPSS

Процентиль: 5%
0.0015
Низкий

7.3 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-424