Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition.
Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.
References
| Link | Resource |
|---|---|
| https://security.paloaltonetworks.com/CVE-2024-5910 | Vendor Advisory |
| https://security.paloaltonetworks.com/CVE-2024-5910 | Vendor Advisory |
| https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise | Exploit Third Party Advisory |
Configurations
History
27 Nov 2024, 17:23
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
08 Nov 2024, 21:04
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:paloaltonetworks:expedition:*:*:*:*:*:*:*:* | |
| First Time |
Paloaltonetworks expedition
Paloaltonetworks |
|
| References | () https://security.paloaltonetworks.com/CVE-2024-5910 - Vendor Advisory | |
| CWE | CWE-306 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
10 Jul 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-10 19:15
Updated : 2024-11-27 17:23
NVD link : CVE-2024-5910
Mitre link : CVE-2024-5910
JSON object : View
Products Affected
paloaltonetworks
- expedition
CWE
CWE-306
Missing Authentication for Critical Function