CVE-2024-5910
Palo Alto Networks Expedition Missing Authentication Vulnerability
CVSS
—
Sem CVSS
EPSS
91.7%
p100
KEV
SIM
7 de nov. de 2024
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Produto
Palo Alto Networks / Expedition
Vulnerabilidade
Palo Alto Networks Expedition Missing Authentication Vulnerability
Adicionado ao KEV
7 de nov. de 2024
Corrigir até
28 de nov. de 2024
Uso conhecido em ransomware
Não
Descrição resumida
Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data.
Ação necessária
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://security.paloaltonetworks.com/CVE-2024-5910 ; https://nvd.nist.gov/vuln/detail/CVE-2024-5910