Critical · 9.2 CVE-2025-0103 EUVD-2025-1500GHSA-cv6f-rw49-r829

Expedition: SQL Injection Vulnerability

Published Jan 11, 2025 · Updated Jan 13, 2025 · Assigned by palo_alto

Vendor: Palo Alto Networks Product: Cloud NGFW Product: Expedition Product: PAN-OS Product: Panorama Product: Prisma Access Category: Network devices

Description

An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. This vulnerability also enables attackers to create and read arbitrary files on the Expedition system.

Affected products

Vendor	Product	Affected	Fixed
Palo Alto Networks	Cloud NGFW	—	All
Palo Alto Networks	Expedition	1 – < 1.2.100	1.2.100
Palo Alto Networks	Panorama	—	All
Palo Alto Networks	PAN-OS	—	All
Palo Alto Networks	Prisma Access	—	All

Advisories 1

WID-SEC-2025-0037 PaloAlto Networks Expedition: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 8, 2025

References

https://security.paloaltonetworks.com/PAN-SA-2025-0001 vendor-advisory