What is CVE-2024-5910?

CVE-2024-5910 is a security advisory published by Palo Alto Networks Security Advisories with Critical severity. CVE-2024-5910 Expedition: Missing Authentication Leads to Admin Account Takeover

Which CVE IDs does CVE-2024-5910 cover?

CVE-2024-5910 covers the following CVE IDs: CVE-2024-5910. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2024-5910?

CVE-2024-5910 affects 1 product, including: Expedition.

CVE-2024-5910Critical

CVE-2024-5910 Expedition: Missing Authentication Leads to Admin Account Takeover

Vendor

Palo Alto Networks Security Advisories

Published

July 10, 2024

Last Modified

November 7, 2024

🔗 CVE IDs covered (1)

CVE-2024-5910 →

📋 Description

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.

🎯 Affected products1

Expedition

✅ Remediation

This issue is fixed in Expedition 1.2.92 and all later versions. Workarounds and mitigations: Ensure network access to Expedition is restricted to authorized users, hosts, or networks.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2024-5910