Refine your search

12 vulnerabilities found for Expedition by Palo Alto Networks

CERTFR-2025-AVI-0016
Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une atteinte à l'intégrité des données et un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products
Vendor Product Description
Palo Alto Networks Prisma Access Browser Prisma Access Browser versions antérieures à 131.205.2943.22
Palo Alto Networks Expedition Expedition versions antérieures à 1.2.101
References

Show details on source website

To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Prisma Access Browser versions ant\u00e9rieures \u00e0 131.205.2943.22",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Expedition versions ant\u00e9rieures \u00e0 1.2.101",
      "product": {
        "name": "Expedition",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-0107",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-0107"
    },
    {
      "name": "CVE-2024-12381",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12381"
    },
    {
      "name": "CVE-2024-12382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12382"
    },
    {
      "name": "CVE-2025-0104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-0104"
    },
    {
      "name": "CVE-2024-12692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12692"
    },
    {
      "name": "CVE-2025-0105",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-0105"
    },
    {
      "name": "CVE-2024-12695",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12695"
    },
    {
      "name": "CVE-2024-12694",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12694"
    },
    {
      "name": "CVE-2024-12693",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-12693"
    },
    {
      "name": "CVE-2025-0106",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-0106"
    },
    {
      "name": "CVE-2025-0103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-0103"
    }
  ],
  "initial_release_date": "2025-01-09T00:00:00",
  "last_revision_date": "2025-01-09T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0016",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-01-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks",
  "vendor_advisories": [
    {
      "published_at": "2025-01-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2025-0002",
      "url": "https://security.paloaltonetworks.com/PAN-SA-2025-0002"
    },
    {
      "published_at": "2025-01-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2025-0001",
      "url": "https://security.paloaltonetworks.com/PAN-SA-2025-0001"
    }
  ]
}

CERTFR-2024-AVI-0859
Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products
Vendor Product Description
Palo Alto Networks Cortex XSOAR Cortex XSOAR versions antérieures à 6.12.0 (Build 1271551)
Palo Alto Networks PAN-OS PAN-OS versions 11.0 antérieures à 11.0.6
Palo Alto Networks PAN-OS PAN-OS versions 10.2.9-x antérieures à 10.2.9-h11
Palo Alto Networks Expedition Expedition versions antérieures à 1.2.96
Palo Alto Networks GlobalProtect App GlobalProtect App versions antérieures à 6.2.5 sur Windows
Palo Alto Networks PAN-OS PAN-OS versions 10.2.10-x antérieures à 10.2.10-h4
Palo Alto Networks Cortex XDR Agent Cortex XDR Agent versions antérieures à 7.9.102-CE sur Windows
Palo Alto Networks PAN-OS PAN-OS versions 11.0.4-x antérieures à 11.0.4-h5
Palo Alto Networks Cortex XDR Agent Cortex XDR Agent versions 8.4.x antérieures à 8.4.1 sur Windows
Palo Alto Networks PAN-OS PAN-OS versions 10.2 antérieures à 10.2.11
Palo Alto Networks PAN-OS PAN-OS versions 11.1 antérieures à 11.1.3
Palo Alto Networks Prisma Access Prisma Access Browser versions antérieures à 129.101.2913.3
Palo Alto Networks PAN-OS PAN-OS versions 10.1 antérieures à 10.1.11
Palo Alto Networks Cortex XDR Agent Cortex XDR Agent versions 8.3.x antérieures à 8.3.1 sur Windows
References

Show details on source website

To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Cortex XSOAR versions ant\u00e9rieures \u00e0 6.12.0 (Build 1271551)",
      "product": {
        "name": "Cortex XSOAR",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.0 ant\u00e9rieures \u00e0 11.0.6",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2.9-x ant\u00e9rieures \u00e0 10.2.9-h11",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Expedition versions ant\u00e9rieures \u00e0 1.2.96",
      "product": {
        "name": "Expedition",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "GlobalProtect App versions ant\u00e9rieures \u00e0 6.2.5 sur Windows",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2.10-x ant\u00e9rieures \u00e0 10.2.10-h4",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Cortex XDR Agent versions ant\u00e9rieures \u00e0 7.9.102-CE sur Windows",
      "product": {
        "name": "Cortex XDR Agent",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.0.4-x ant\u00e9rieures \u00e0 11.0.4-h5",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Cortex XDR Agent versions 8.4.x ant\u00e9rieures \u00e0 8.4.1 sur Windows",
      "product": {
        "name": "Cortex XDR Agent",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2 ant\u00e9rieures \u00e0 10.2.11",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1 ant\u00e9rieures \u00e0 11.1.3",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access Browser versions ant\u00e9rieures \u00e0 129.101.2913.3",
      "product": {
        "name": "Prisma Access",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.1 ant\u00e9rieures \u00e0 10.1.11",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Cortex XDR Agent versions 8.3.x ant\u00e9rieures \u00e0 8.3.1 sur Windows",
      "product": {
        "name": "Cortex XDR Agent",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-9468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9468"
    },
    {
      "name": "CVE-2024-8909",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-8909"
    },
    {
      "name": "CVE-2024-9603",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9603"
    },
    {
      "name": "CVE-2024-8905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-8905"
    },
    {
      "name": "CVE-2024-7025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-7025"
    },
    {
      "name": "CVE-2024-8906",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-8906"
    },
    {
      "name": "CVE-2024-9123",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9123"
    },
    {
      "name": "CVE-2024-8907",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-8907"
    },
    {
      "name": "CVE-2024-9469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9469"
    },
    {
      "name": "CVE-2024-9471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9471"
    },
    {
      "name": "CVE-2024-9370",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9370"
    },
    {
      "name": "CVE-2024-9470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9470"
    },
    {
      "name": "CVE-2024-9463",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9463"
    },
    {
      "name": "CVE-2024-9602",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9602"
    },
    {
      "name": "CVE-2024-9467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9467"
    },
    {
      "name": "CVE-2024-9122",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9122"
    },
    {
      "name": "CVE-2024-9464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9464"
    },
    {
      "name": "CVE-2024-9121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9121"
    },
    {
      "name": "CVE-2024-8904",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-8904"
    },
    {
      "name": "CVE-2024-9369",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9369"
    },
    {
      "name": "CVE-2024-9120",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9120"
    },
    {
      "name": "CVE-2024-9465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9465"
    },
    {
      "name": "CVE-2024-9466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9466"
    },
    {
      "name": "CVE-2024-9473",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-9473"
    },
    {
      "name": "CVE-2024-8908",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-8908"
    }
  ],
  "initial_release_date": "2024-10-10T00:00:00",
  "last_revision_date": "2024-10-10T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0859",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-10-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks",
  "vendor_advisories": [
    {
      "published_at": "2024-10-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2024-0010",
      "url": "https://security.paloaltonetworks.com/PAN-SA-2024-0010"
    },
    {
      "published_at": "2024-10-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2024-0011",
      "url": "https://security.paloaltonetworks.com/PAN-SA-2024-0011"
    },
    {
      "published_at": "2024-10-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CPATR-23347",
      "url": "https://security.paloaltonetworks.com/CVE-2024-9469"
    },
    {
      "published_at": "2024-10-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks GPC-19493 et GPC-21211",
      "url": "https://security.paloaltonetworks.com/CVE-2024-9473"
    },
    {
      "published_at": "2024-10-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-244840",
      "url": "https://security.paloaltonetworks.com/CVE-2024-9468"
    },
    {
      "published_at": "2024-10-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-217511 et PAN-152631",
      "url": "https://security.paloaltonetworks.com/CVE-2024-9471"
    },
    {
      "published_at": "2024-10-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CRTX-105114",
      "url": "https://security.paloaltonetworks.com/CVE-2024-9470"
    }
  ]
}

CERTFR-2024-AVI-0567
Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

L'éditeur indique que le correctif pour la vulnérabilité CVE-2024-3596 pour Prisma Access devrait être disponible le 30 Juillet 2024.

Impacted products
Vendor Product Description
Palo Alto Networks GlobalProtect App PAN-OS versions 11.1 antérieures à 11.1.4
Palo Alto Networks Expedition Expedition versions 1.2 antérieures à 1.2.92
Palo Alto Networks GlobalProtect App PAN-OS versions 10.1 antérieures à 10.1.9 sur Panorama
Palo Alto Networks GlobalProtect App PAN-OS versions 10.2 antérieures à 10.2.4 sur Panorama
Palo Alto Networks Expedition Script d'installation initSetup_v2.0 pour Expedition versions antérieures à la date 20240605
Palo Alto Networks GlobalProtect App PAN-OS versions 10.2 antérieures à 10.2.10
Palo Alto Networks GlobalProtect App PAN-OS versions 9.1 antérieures à 9.1.19
Palo Alto Networks GlobalProtect App PAN-OS versions 11.0 antérieures à 11.0.5
Palo Alto Networks Cortex XDR Agent Cortex XDR Agent versions 8.2 antérieures à 8.2.2
Palo Alto Networks Cortex XDR Agent Cortex XDR Agent versions 7.9-CE antérieures à 7.9.102-CE
Palo Alto Networks GlobalProtect App PAN-OS versions 11.2 antérieures à 11.2.1
Palo Alto Networks GlobalProtect App PAN-OS versions 10.1 antérieures à 10.1.14-h2
Palo Alto Networks Prisma Access Prisma Access toutes versions
References

Show details on source website

To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "PAN-OS versions 11.1 ant\u00e9rieures \u00e0 11.1.4",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Expedition versions 1.2 ant\u00e9rieures \u00e0 1.2.92",
      "product": {
        "name": "Expedition",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.1 ant\u00e9rieures \u00e0 10.1.9 sur Panorama",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2 ant\u00e9rieures \u00e0 10.2.4 sur Panorama",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Script d\u0027installation initSetup_v2.0 pour Expedition versions ant\u00e9rieures \u00e0 la date 20240605",
      "product": {
        "name": "Expedition",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2 ant\u00e9rieures \u00e0 10.2.10",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 9.1 ant\u00e9rieures \u00e0 9.1.19",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.0 ant\u00e9rieures \u00e0 11.0.5",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Cortex XDR Agent versions 8.2 ant\u00e9rieures \u00e0 8.2.2",
      "product": {
        "name": "Cortex XDR Agent",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Cortex XDR Agent versions 7.9-CE ant\u00e9rieures \u00e0 7.9.102-CE",
      "product": {
        "name": "Cortex XDR Agent",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.2 ant\u00e9rieures \u00e0 11.2.1",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.1 ant\u00e9rieures \u00e0 10.1.14-h2",
      "product": {
        "name": "GlobalProtect App",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access toutes versions",
      "product": {
        "name": "Prisma Access",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "L\u0027\u00e9diteur indique que le correctif pour la vuln\u00e9rabilit\u00e9 CVE-2024-3596 pour Prisma Access devrait \u00eatre disponible le 30 Juillet 2024.",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-5911",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-5911"
    },
    {
      "name": "CVE-2024-3596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-3596"
    },
    {
      "name": "CVE-2024-5913",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-5913"
    },
    {
      "name": "CVE-2024-5910",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-5910"
    },
    {
      "name": "CVE-2024-5912",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-5912"
    }
  ],
  "initial_release_date": "2024-07-11T00:00:00",
  "last_revision_date": "2024-07-11T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0567",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks",
  "vendor_advisories": [
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2024-5910",
      "url": "https://security.paloaltonetworks.com/CVE-2024-5910"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-247511",
      "url": "https://security.paloaltonetworks.com/CVE-2024-3596"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2024-0006",
      "url": "https://security.paloaltonetworks.com/PAN-SA-2024-0006"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CPATR-22565",
      "url": "https://security.paloaltonetworks.com/CVE-2024-5912"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2024-5913",
      "url": "https://security.paloaltonetworks.com/CVE-2024-5913"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-182835",
      "url": "https://security.paloaltonetworks.com/CVE-2024-5911"
    }
  ]
}

CERTFR-2020-AVI-089
Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans Palo Alto . Elles permettent à un attaquant de provoquer un déni de service, une élévation de privilèges et une injection de requêtes illégitimes par rebond (CSRF).

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Palo Alto Networks N/A GlobalProtect 5.0.x versions antérieures à 5.0.6
Palo Alto Networks PAN-OS PAN-OS 8.x versions antérieures à 8.1.12
Palo Alto Networks PAN-OS PAN-OS 9.x versions antérieures à 9.0.6
Palo Alto Networks Expedition Expedition Migration Tool versions antérieures à 1.1.52
References

Show details on source website

To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "GlobalProtect 5.0.x versions ant\u00e9rieures \u00e0 5.0.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS 8.x versions ant\u00e9rieures \u00e0 8.1.12",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS 9.x versions ant\u00e9rieures \u00e0 9.0.6",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Expedition Migration Tool versions ant\u00e9rieures \u00e0 1.1.52",
      "product": {
        "name": "Expedition",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2020-1975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-1975"
    },
    {
      "name": "CVE-2020-1976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-1976"
    },
    {
      "name": "CVE-2020-1977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-1977"
    }
  ],
  "initial_release_date": "2020-02-13T00:00:00",
  "last_revision_date": "2020-02-13T00:00:00",
  "links": [],
  "reference": "CERTFR-2020-AVI-089",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2020-02-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Palo Alto . Elles\npermettent \u00e0 un attaquant de provoquer un d\u00e9ni de service, une \u00e9l\u00e9vation\nde privil\u00e8ges et une injection de requ\u00eates ill\u00e9gitimes par rebond\n(CSRF).\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto 1 du 12 f\u00e9vrier 2020",
      "url": "https://security.paloaltonetworks.com/CVE-2020-1975"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto 2 du 12 f\u00e9vrier 2020",
      "url": "https://security.paloaltonetworks.com/CVE-2020-1976"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto 3 du 12 f\u00e9vrier 2020",
      "url": "https://security.paloaltonetworks.com/CVE-2020-1977"
    }
  ]
}

CERTFR-2019-AVI-168
Vulnerability from certfr_avis

Une vulnérabilité a été découverte dans Palo Alto Expedition. Elle permet à un attaquant de provoquer une injection de code indirecte à distance (XSS).

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Palo Alto Networks Expedition Expedition versions antérieures à 1.1.13
References

Show details on source website

To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Expedition versions ant\u00e9rieures \u00e0 1.1.13",
      "product": {
        "name": "Expedition",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2019-1574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1574"
    }
  ],
  "initial_release_date": "2019-04-15T00:00:00",
  "last_revision_date": "2019-04-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2019-AVI-168",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2019-04-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Palo Alto Expedition. Elle\npermet \u00e0 un attaquant de provoquer une injection de code indirecte \u00e0\ndistance (XSS).\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Palo Alto Expedition",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto 147 du 11 avril 2019",
      "url": "https://securityadvisories.paloaltonetworks.com/Home/Detail/147"
    }
  ]
}

CERTFR-2019-AVI-084
Vulnerability from certfr_avis

Une vulnérabilité a été découverte dans Palo Alto Expedition. Elle permet à un attaquant de provoquer une injection de code indirecte à distance (XSS).

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Palo Alto Networks Expedition Expedition versions antérieures à 1.1.7
References

Show details on source website

To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Expedition versions ant\u00e9rieures \u00e0 1.1.7",
      "product": {
        "name": "Expedition",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2019-1567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-1567"
    }
  ],
  "initial_release_date": "2019-03-01T00:00:00",
  "last_revision_date": "2019-03-01T00:00:00",
  "links": [],
  "reference": "CERTFR-2019-AVI-084",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2019-03-01T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Palo Alto Expedition. Elle\npermet \u00e0 un attaquant de provoquer une injection de code indirecte \u00e0\ndistance (XSS).\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Palo Alto Expedition",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto MT-908 du 28 f\u00e9vrier 2019",
      "url": "https://securityadvisories.paloaltonetworks.com/Home/Detail/141"
    }
  ]
}

CVE-2024-9465 (GCVE-0-2024-9465)
Vulnerability from nvd
Published
2024-10-09 17:04
Modified
2025-10-21 22:55
Severity ?
9.2 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber
CWE
  • CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Summary
An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.
References
Impacted products
Vendor Product Version
Palo Alto Networks Expedition Version: 1.2.0   < 1.2.96
    cpe:2.3:a:paloaltonetworks:expedition:1.2.0:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.2:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.3:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.4:2:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.5:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.6:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.7:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.8:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.9:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.10:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.11:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.12:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.13:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.14:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.15:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.16:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.17:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.18:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.19:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.20:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.21:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.22:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.23:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.24:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.25:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.26:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.28:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.29:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.30:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.31:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.32:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.33:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.34:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.35:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.36:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.37:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.38:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.39:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.40:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.41:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.42:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.43:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.44:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.45:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.46:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.47:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.48:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.49:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.50:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.51:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.52:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.53:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.54:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.55:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.56:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.57:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.58:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.59:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.60:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.61:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.62:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.63:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.64:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.65:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.66:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.67:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.68:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.69:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.70:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.71:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.72:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.73:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.74:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.75:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.76:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.77:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.78:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.79:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.80:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.81:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.82:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.83:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.84:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.85:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.86:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.87:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.88:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.89:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.90:1:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.91:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.92:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.93:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.94:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.95:-:*:*:*:*:*:*
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-9465",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-20T03:55:58.218772Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2024-11-14",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9465"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T22:55:42.570Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9465"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2024-11-14T00:00:00+00:00",
            "value": "CVE-2024-9465 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.4:2:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.5:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.6:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.8:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.9:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.11:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.12:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.14:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.15:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.16:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.17:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.18:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.19:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.20:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.21:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.22:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.23:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.24:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.25:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.26:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.28:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.29:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.30:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.31:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.32:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.33:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.34:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.35:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.36:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.37:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.38:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.39:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.40:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.41:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.42:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.43:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.44:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.45:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.46:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.47:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.48:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.49:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.50:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.51:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.52:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.53:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.54:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.55:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.56:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.57:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.58:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.59:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.60:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.61:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.62:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.63:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.64:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.65:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.66:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.67:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.68:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.69:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.70:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.71:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.72:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.73:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.74:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.75:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.76:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.77:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.78:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.79:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.80:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.81:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.82:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.83:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.84:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.85:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.86:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.87:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.88:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.89:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.90:1:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.91:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.92:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.93:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.94:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.95:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Expedition",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.2.96",
                  "status": "unaffected"
                }
              ],
              "lessThan": "1.2.96",
              "status": "affected",
              "version": "1.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Zach Hanley (@hacks_zach) of Horizon3.ai"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Enrique Castillo of Palo Alto Networks"
        }
      ],
      "datePublic": "2024-10-09T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system."
            }
          ],
          "value": "An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-108",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-108 Command Line Execution through SQL Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "CONCENTRATED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "HIGH"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-18T11:50:43.190Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/PAN-SA-2024-0010"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The fixes for all listed issues are available in Expedition 1.2.96, and all later Expedition versions.\u003cbr\u003e\u003cbr\u003eAll Expedition usernames, passwords, and API keys should be rotated after upgrading to the fixed version of Expedition.\u003cbr\u003e\u003cbr\u003eAll firewall usernames, passwords, and API keys processed by Expedition should be rotated after updating."
            }
          ],
          "value": "The fixes for all listed issues are available in Expedition 1.2.96, and all later Expedition versions.\n\nAll Expedition usernames, passwords, and API keys should be rotated after upgrading to the fixed version of Expedition.\n\nAll firewall usernames, passwords, and API keys processed by Expedition should be rotated after updating."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2024-10-09T16:00:00.000Z",
          "value": "Initial publication"
        }
      ],
      "title": "Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Ensure networks access to Expedition is restricted to authorized users, hosts, or networks.\u003cbr\u003e\u003cbr\u003eYou can check for an indicator of compromise with the following command on an Expedition system (replace \"root\" with your username if you are using a different username):\u003cbr\u003e\u003cbr\u003e\u0026nbsp; \u0026nbsp; mysql -uroot -p -D pandb -e \"SELECT * FROM cronjobs;\"\u003cbr\u003e\u003cbr\u003eIf you see any records returned, this indicates a potential compromise. Please note that if no records are returned, the system may still be compromised. This is only intended to indicate a potential compromise, rather than confirm a system has not been compromised."
            }
          ],
          "value": "Ensure networks access to Expedition is restricted to authorized users, hosts, or networks.\n\nYou can check for an indicator of compromise with the following command on an Expedition system (replace \"root\" with your username if you are using a different username):\n\n\u00a0 \u00a0 mysql -uroot -p -D pandb -e \"SELECT * FROM cronjobs;\"\n\nIf you see any records returned, this indicates a potential compromise. Please note that if no records are returned, the system may still be compromised. This is only intended to indicate a potential compromise, rather than confirm a system has not been compromised."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2024-9465",
    "datePublished": "2024-10-09T17:04:01.720Z",
    "dateReserved": "2024-10-03T11:35:12.544Z",
    "dateUpdated": "2025-10-21T22:55:42.570Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-9463 (GCVE-0-2024-9463)
Vulnerability from nvd
Published
2024-10-09 17:03
Modified
2025-10-21 22:55
Severity ?
9.9 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber
CWE
  • CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary
An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
References
Impacted products
Vendor Product Version
Palo Alto Networks Expedition Version: 1.2.0   < 1.2.96
    cpe:2.3:a:paloaltonetworks:expedition:1.2.0:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.2:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.3:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.4:2:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.5:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.6:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.7:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.8:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.9:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.10:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.11:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.12:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.13:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.14:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.15:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.16:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.17:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.18:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.19:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.20:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.21:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.22:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.23:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.24:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.25:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.26:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.28:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.29:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.30:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.31:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.32:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.33:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.34:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.35:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.36:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.37:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.38:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.39:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.40:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.41:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.42:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.43:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.44:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.45:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.46:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.47:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.48:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.49:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.50:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.51:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.52:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.53:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.54:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.55:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.56:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.57:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.58:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.59:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.60:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.61:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.62:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.63:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.64:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.65:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.66:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.67:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.68:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.69:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.70:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.71:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.72:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.73:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.74:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.75:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.76:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.77:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.78:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.79:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.80:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.81:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.82:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.83:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.84:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.85:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.86:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.87:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.88:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.89:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.90:1:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.91:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.92:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.93:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.94:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.95:-:*:*:*:*:*:*
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-9463",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-20T03:55:56.863014Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2024-11-14",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9463"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T22:55:42.730Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9463"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2024-11-14T00:00:00+00:00",
            "value": "CVE-2024-9463 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.4:2:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.5:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.6:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.8:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.9:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.11:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.12:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.14:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.15:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.16:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.17:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.18:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.19:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.20:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.21:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.22:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.23:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.24:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.25:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.26:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.28:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.29:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.30:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.31:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.32:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.33:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.34:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.35:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.36:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.37:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.38:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.39:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.40:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.41:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.42:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.43:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.44:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.45:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.46:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.47:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.48:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.49:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.50:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.51:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.52:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.53:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.54:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.55:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.56:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.57:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.58:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.59:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.60:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.61:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.62:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.63:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.64:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.65:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.66:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.67:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.68:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.69:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.70:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.71:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.72:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.73:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.74:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.75:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.76:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.77:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.78:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.79:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.80:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.81:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.82:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.83:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.84:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.85:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.86:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.87:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.88:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.89:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.90:1:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.91:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.92:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.93:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.94:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.95:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Expedition",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.2.96",
                  "status": "unaffected"
                }
              ],
              "lessThan": "1.2.96",
              "status": "affected",
              "version": "1.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Enrique Castillo of Palo Alto Networks"
        }
      ],
      "datePublic": "2024-10-09T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls."
            }
          ],
          "value": "An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-88",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-88 OS Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "CONCENTRATED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "HIGH"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-18T11:47:33.445Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/PAN-SA-2024-0010"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The fixes for all listed issues are available in Expedition 1.2.96, and all later Expedition versions.\u003cbr\u003e\u003cbr\u003eAll Expedition usernames, passwords, and API keys should be rotated after upgrading to the fixed version of Expedition.\u003cbr\u003e\u003cbr\u003eAll firewall usernames, passwords, and API keys processed by Expedition should be rotated after updating."
            }
          ],
          "value": "The fixes for all listed issues are available in Expedition 1.2.96, and all later Expedition versions.\n\nAll Expedition usernames, passwords, and API keys should be rotated after upgrading to the fixed version of Expedition.\n\nAll firewall usernames, passwords, and API keys processed by Expedition should be rotated after updating."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2024-10-09T16:00:00.000Z",
          "value": "Initial publication"
        }
      ],
      "title": "Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Ensure networks access to Expedition is restricted to authorized users, hosts, or networks.\u003cbr\u003e"
            }
          ],
          "value": "Ensure networks access to Expedition is restricted to authorized users, hosts, or networks."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2024-9463",
    "datePublished": "2024-10-09T17:03:12.012Z",
    "dateReserved": "2024-10-03T11:35:09.867Z",
    "dateUpdated": "2025-10-21T22:55:42.730Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-5910 (GCVE-0-2024-5910)
Vulnerability from nvd
Published
2024-07-10 18:39
Modified
2025-10-21 22:55
Severity ?
9.3 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y/R:U/V:D/RE:M/U:Red
CWE
  • CWE-306 - Missing Authentication for Critical Function
Summary
Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.
References
Impacted products
Vendor Product Version
Palo Alto Networks Expedition Version: 1.2   < 1.2.92
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:paloaltonetworks:expedition:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "expedition",
            "vendor": "paloaltonetworks",
            "versions": [
              {
                "lessThan": "1.2.92",
                "status": "affected",
                "version": "1.2",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-5910",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-07T04:55:50.697197Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2024-11-07",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-5910"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T22:55:49.276Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-5910"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2024-11-07T00:00:00+00:00",
            "value": "CVE-2024-5910 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-11-08T16:40:17.301Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.paloaltonetworks.com/CVE-2024-5910"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Expedition",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.2.92",
                  "status": "unaffected"
                }
              ],
              "lessThan": "1.2.92",
              "status": "affected",
              "version": "1.2",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Brian Hysell (Synopsys CyRC)"
        }
      ],
      "datePublic": "2024-07-10T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition.\u003cbr\u003e\u003cbr\u003eNote: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue."
            }
          ],
          "value": "Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition.\n\nNote: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.\u003cbr\u003e"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-115",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-115 Authentication Bypass"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "YES",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "providerUrgency": "RED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y/R:U/V:D/RE:M/U:Red",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306 Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-10T18:39:26.006Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2024-5910"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This issue is fixed in Expedition 1.2.92 and all later versions.\u003cbr\u003e"
            }
          ],
          "value": "This issue is fixed in Expedition 1.2.92 and all later versions."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2024-07-10T16:00:00.000Z",
          "value": "Initial publication"
        }
      ],
      "title": "Expedition: Missing Authentication Leads to Admin Account Takeover",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Ensure networks access to Expedition is restricted to authorized users, hosts, or networks.\u003cbr\u003e"
            }
          ],
          "value": "Ensure networks access to Expedition is restricted to authorized users, hosts, or networks."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2024-5910",
    "datePublished": "2024-07-10T18:39:26.006Z",
    "dateReserved": "2024-06-12T15:27:55.854Z",
    "dateUpdated": "2025-10-21T22:55:49.276Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-9465 (GCVE-0-2024-9465)
Vulnerability from cvelistv5
Published
2024-10-09 17:04
Modified
2025-10-21 22:55
Severity ?
9.2 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber
CWE
  • CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Summary
An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.
References
Impacted products
Vendor Product Version
Palo Alto Networks Expedition Version: 1.2.0   < 1.2.96
    cpe:2.3:a:paloaltonetworks:expedition:1.2.0:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.2:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.3:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.4:2:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.5:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.6:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.7:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.8:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.9:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.10:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.11:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.12:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.13:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.14:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.15:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.16:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.17:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.18:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.19:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.20:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.21:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.22:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.23:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.24:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.25:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.26:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.28:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.29:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.30:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.31:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.32:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.33:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.34:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.35:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.36:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.37:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.38:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.39:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.40:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.41:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.42:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.43:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.44:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.45:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.46:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.47:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.48:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.49:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.50:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.51:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.52:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.53:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.54:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.55:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.56:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.57:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.58:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.59:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.60:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.61:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.62:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.63:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.64:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.65:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.66:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.67:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.68:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.69:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.70:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.71:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.72:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.73:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.74:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.75:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.76:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.77:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.78:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.79:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.80:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.81:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.82:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.83:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.84:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.85:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.86:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.87:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.88:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.89:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.90:1:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.91:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.92:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.93:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.94:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.95:-:*:*:*:*:*:*
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-9465",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-20T03:55:58.218772Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2024-11-14",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9465"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T22:55:42.570Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9465"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2024-11-14T00:00:00+00:00",
            "value": "CVE-2024-9465 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.4:2:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.5:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.6:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.8:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.9:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.11:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.12:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.14:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.15:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.16:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.17:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.18:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.19:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.20:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.21:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.22:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.23:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.24:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.25:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.26:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.28:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.29:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.30:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.31:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.32:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.33:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.34:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.35:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.36:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.37:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.38:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.39:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.40:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.41:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.42:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.43:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.44:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.45:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.46:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.47:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.48:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.49:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.50:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.51:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.52:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.53:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.54:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.55:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.56:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.57:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.58:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.59:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.60:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.61:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.62:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.63:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.64:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.65:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.66:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.67:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.68:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.69:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.70:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.71:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.72:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.73:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.74:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.75:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.76:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.77:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.78:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.79:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.80:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.81:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.82:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.83:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.84:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.85:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.86:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.87:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.88:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.89:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.90:1:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.91:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.92:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.93:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.94:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.95:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Expedition",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.2.96",
                  "status": "unaffected"
                }
              ],
              "lessThan": "1.2.96",
              "status": "affected",
              "version": "1.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Zach Hanley (@hacks_zach) of Horizon3.ai"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Enrique Castillo of Palo Alto Networks"
        }
      ],
      "datePublic": "2024-10-09T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system."
            }
          ],
          "value": "An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-108",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-108 Command Line Execution through SQL Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "CONCENTRATED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "HIGH"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-18T11:50:43.190Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/PAN-SA-2024-0010"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The fixes for all listed issues are available in Expedition 1.2.96, and all later Expedition versions.\u003cbr\u003e\u003cbr\u003eAll Expedition usernames, passwords, and API keys should be rotated after upgrading to the fixed version of Expedition.\u003cbr\u003e\u003cbr\u003eAll firewall usernames, passwords, and API keys processed by Expedition should be rotated after updating."
            }
          ],
          "value": "The fixes for all listed issues are available in Expedition 1.2.96, and all later Expedition versions.\n\nAll Expedition usernames, passwords, and API keys should be rotated after upgrading to the fixed version of Expedition.\n\nAll firewall usernames, passwords, and API keys processed by Expedition should be rotated after updating."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2024-10-09T16:00:00.000Z",
          "value": "Initial publication"
        }
      ],
      "title": "Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Ensure networks access to Expedition is restricted to authorized users, hosts, or networks.\u003cbr\u003e\u003cbr\u003eYou can check for an indicator of compromise with the following command on an Expedition system (replace \"root\" with your username if you are using a different username):\u003cbr\u003e\u003cbr\u003e\u0026nbsp; \u0026nbsp; mysql -uroot -p -D pandb -e \"SELECT * FROM cronjobs;\"\u003cbr\u003e\u003cbr\u003eIf you see any records returned, this indicates a potential compromise. Please note that if no records are returned, the system may still be compromised. This is only intended to indicate a potential compromise, rather than confirm a system has not been compromised."
            }
          ],
          "value": "Ensure networks access to Expedition is restricted to authorized users, hosts, or networks.\n\nYou can check for an indicator of compromise with the following command on an Expedition system (replace \"root\" with your username if you are using a different username):\n\n\u00a0 \u00a0 mysql -uroot -p -D pandb -e \"SELECT * FROM cronjobs;\"\n\nIf you see any records returned, this indicates a potential compromise. Please note that if no records are returned, the system may still be compromised. This is only intended to indicate a potential compromise, rather than confirm a system has not been compromised."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2024-9465",
    "datePublished": "2024-10-09T17:04:01.720Z",
    "dateReserved": "2024-10-03T11:35:12.544Z",
    "dateUpdated": "2025-10-21T22:55:42.570Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-9463 (GCVE-0-2024-9463)
Vulnerability from cvelistv5
Published
2024-10-09 17:03
Modified
2025-10-21 22:55
Severity ?
9.9 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber
CWE
  • CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary
An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
References
Impacted products
Vendor Product Version
Palo Alto Networks Expedition Version: 1.2.0   < 1.2.96
    cpe:2.3:a:paloaltonetworks:expedition:1.2.0:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.2:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.3:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.4:2:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.5:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.6:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.7:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.8:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.9:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.10:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.11:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.12:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.13:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.14:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.15:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.16:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.17:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.18:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.19:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.20:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.21:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.22:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.23:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.24:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.25:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.26:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.28:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.29:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.30:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.31:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.32:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.33:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.34:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.35:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.36:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.37:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.38:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.39:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.40:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.41:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.42:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.43:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.44:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.45:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.46:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.47:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.48:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.49:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.50:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.51:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.52:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.53:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.54:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.55:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.56:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.57:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.58:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.59:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.60:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.61:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.62:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.63:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.64:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.65:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.66:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.67:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.68:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.69:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.70:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.71:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.72:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.73:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.74:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.75:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.76:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.77:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.78:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.79:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.80:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.81:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.82:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.83:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.84:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.85:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.86:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.87:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.88:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.89:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.90:1:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.91:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.92:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.93:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.94:-:*:*:*:*:*:*
    cpe:2.3:a:paloaltonetworks:expedition:1.2.95:-:*:*:*:*:*:*
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-9463",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-20T03:55:56.863014Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2024-11-14",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9463"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T22:55:42.730Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9463"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2024-11-14T00:00:00+00:00",
            "value": "CVE-2024-9463 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.4:2:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.5:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.6:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.8:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.9:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.11:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.12:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.13:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.14:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.15:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.16:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.17:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.18:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.19:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.20:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.21:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.22:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.23:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.24:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.25:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.26:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.28:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.29:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.30:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.31:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.32:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.33:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.34:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.35:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.36:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.37:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.38:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.39:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.40:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.41:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.42:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.43:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.44:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.45:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.46:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.47:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.48:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.49:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.50:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.51:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.52:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.53:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.54:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.55:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.56:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.57:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.58:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.59:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.60:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.61:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.62:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.63:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.64:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.65:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.66:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.67:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.68:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.69:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.70:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.71:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.72:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.73:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.74:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.75:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.76:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.77:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.78:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.79:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.80:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.81:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.82:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.83:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.84:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.85:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.86:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.87:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.88:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.89:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.90:1:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.91:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.92:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.93:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.94:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:expedition:1.2.95:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Expedition",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.2.96",
                  "status": "unaffected"
                }
              ],
              "lessThan": "1.2.96",
              "status": "affected",
              "version": "1.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Enrique Castillo of Palo Alto Networks"
        }
      ],
      "datePublic": "2024-10-09T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls."
            }
          ],
          "value": "An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-88",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-88 OS Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "CONCENTRATED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "HIGH"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-18T11:47:33.445Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/PAN-SA-2024-0010"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The fixes for all listed issues are available in Expedition 1.2.96, and all later Expedition versions.\u003cbr\u003e\u003cbr\u003eAll Expedition usernames, passwords, and API keys should be rotated after upgrading to the fixed version of Expedition.\u003cbr\u003e\u003cbr\u003eAll firewall usernames, passwords, and API keys processed by Expedition should be rotated after updating."
            }
          ],
          "value": "The fixes for all listed issues are available in Expedition 1.2.96, and all later Expedition versions.\n\nAll Expedition usernames, passwords, and API keys should be rotated after upgrading to the fixed version of Expedition.\n\nAll firewall usernames, passwords, and API keys processed by Expedition should be rotated after updating."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2024-10-09T16:00:00.000Z",
          "value": "Initial publication"
        }
      ],
      "title": "Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Ensure networks access to Expedition is restricted to authorized users, hosts, or networks.\u003cbr\u003e"
            }
          ],
          "value": "Ensure networks access to Expedition is restricted to authorized users, hosts, or networks."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2024-9463",
    "datePublished": "2024-10-09T17:03:12.012Z",
    "dateReserved": "2024-10-03T11:35:09.867Z",
    "dateUpdated": "2025-10-21T22:55:42.730Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-5910 (GCVE-0-2024-5910)
Vulnerability from cvelistv5
Published
2024-07-10 18:39
Modified
2025-10-21 22:55
Severity ?
9.3 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y/R:U/V:D/RE:M/U:Red
CWE
  • CWE-306 - Missing Authentication for Critical Function
Summary
Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.
References
Impacted products
Vendor Product Version
Palo Alto Networks Expedition Version: 1.2   < 1.2.92
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:paloaltonetworks:expedition:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "expedition",
            "vendor": "paloaltonetworks",
            "versions": [
              {
                "lessThan": "1.2.92",
                "status": "affected",
                "version": "1.2",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-5910",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-07T04:55:50.697197Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2024-11-07",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-5910"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T22:55:49.276Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-5910"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2024-11-07T00:00:00+00:00",
            "value": "CVE-2024-5910 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-11-08T16:40:17.301Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.paloaltonetworks.com/CVE-2024-5910"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Expedition",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.2.92",
                  "status": "unaffected"
                }
              ],
              "lessThan": "1.2.92",
              "status": "affected",
              "version": "1.2",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Brian Hysell (Synopsys CyRC)"
        }
      ],
      "datePublic": "2024-07-10T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition.\u003cbr\u003e\u003cbr\u003eNote: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue."
            }
          ],
          "value": "Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition.\n\nNote: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.\u003cbr\u003e"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-115",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-115 Authentication Bypass"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "YES",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "providerUrgency": "RED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y/R:U/V:D/RE:M/U:Red",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306 Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-10T18:39:26.006Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2024-5910"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This issue is fixed in Expedition 1.2.92 and all later versions.\u003cbr\u003e"
            }
          ],
          "value": "This issue is fixed in Expedition 1.2.92 and all later versions."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2024-07-10T16:00:00.000Z",
          "value": "Initial publication"
        }
      ],
      "title": "Expedition: Missing Authentication Leads to Admin Account Takeover",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Ensure networks access to Expedition is restricted to authorized users, hosts, or networks.\u003cbr\u003e"
            }
          ],
          "value": "Ensure networks access to Expedition is restricted to authorized users, hosts, or networks."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2024-5910",
    "datePublished": "2024-07-10T18:39:26.006Z",
    "dateReserved": "2024-06-12T15:27:55.854Z",
    "dateUpdated": "2025-10-21T22:55:49.276Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}