Palo Alto Networks Prisma Browser Insufficient Policy Enforcement Vulnerability Allowing Screenshot Control Bypass

A vulnerability has been identified in Palo Alto Networks Prisma Browser on Windows, where insufficient policy enforcement allows a locally authenticated non-admin user to bypass the screenshot control feature. This issue arises from a lack of proper validation in the browser's policy management, enabling users to manipulate or circumvent intended restrictions. To mitigate this vulnerability, users should ensure that the browser's self-protection feature is activated.

Impact

Exploitation of this vulnerability allows for unauthorized bypass of the screenshot control feature in Prisma Browser, potentially leading to unauthorized capture of screen content.

Remediation

Users can update to Prisma Browser version 142.15.6.60 or later, where this vulnerability has been addressed.