CVE-2024-5910 — Expedition: Missing Authentication Leads to Admin Account Takeover

Description (CNA)

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Expedition	affected 1.2 before 1.2.92

CWE

CWE-306

References

https://security.paloaltonetworks.com/CVE-2024-5910

ADP enrichment

CISA-ADP

No English description supplied.

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-5910

CVE

No English description supplied.

https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise
https://security.paloaltonetworks.com/CVE-2024-5910