CVE-2024-9466 — Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure

CVE-2024-9466

Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure PUBLISHED

Description (CNA)

A cleartext storage of sensitive information vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to reveal firewall usernames, passwords, and API keys generated using those credentials.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Expedition	affected 1.2.0 before 1.2.96

CWE

CWE-532

References

https://security.paloaltonetworks.com/PAN-SA-2024-0010
https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.