Skip to content
OpenAdvisories
Critical 1 exploited CVE WID-SEC-2024-3371 1 CVE

PaloAlto Networks Expedition: Schwachstelle ermöglicht Erlangen von Administratorrechten

Published Nov 7, 2024 · Updated Nov 7, 2024 · de-DE

Vendor: Palo Alto Networks Product: Expedition

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in PaloAlto Networks Expedition ausnutzen, um Administratorrechte zu erlangen.

Product

Palo Alto Expedition ist eine Next-Generation-Firewall (NGFW)-Plattform

Vulnerabilities 1

  • Critical 9.3
    CVE-2024-5910 Exploited Public exploit Scanner template EPSS 92%

    Expedition: Missing Authentication Leads to Admin Account Takeover

    Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichm…

    Palo Alto Networks Expedition Network devices
    KEV Nov 7, 2024

Revision history

  1. #1

    Initiale Fassung

References