CVE-2024-5910

July 10, 2024, 7:15 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Palo Alto Networks Expedition

Source

psirt@paloaltonetworks.com

Tags

CVE-2024-5910 details

Published : July 10, 2024, 7:15 p.m.
Last Modified : July 10, 2024, 7:15 p.m.

Description

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description
CWE-306 Missing Authentication for Critical Function The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References

URL Source
https://security.paloaltonetworks.com/CVE-2024-5910 psirt@paloaltonetworks.com
This website uses the NVD API, but is not approved or certified by it.