coldbraid

CVE-2024-5910 Palo Alto Networks Expedition

Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data.

CVSS
not scored

CWE-306

On CISA’s exploited list

Palo Alto Networks Expedition Missing Authentication Vulnerability

Added
2024-11-07
Federal patch deadline
2024-11-28
Ransomware use
not known