CVE-2024-5910

🗓️ 10 Jul 2024 18:39:26Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 2514 Views

Expedition admin account takeover risk due to missing authentication for critical function

Reporter	Title	Published	Views	Family All 30
0day.today	Palo Alto Expedition 1.2.91 Remote Code Execution Exploit	14 Nov 202400:00	–	zdt
ATTACKERKB	CVE-2024-5910	10 Jul 202400:00	–	attackerkb
Circl	CVE-2024-5910	10 Jul 202421:49	–	circl
CISA KEV Catalog	Palo Alto Networks Expedition Missing Authentication Vulnerability	7 Nov 202400:00	–	cisa_kev
CISA	CISA Adds Four Known Exploited Vulnerabilities to Catalog	7 Nov 202412:00	–	cisa
CNNVD	Palo Alto Networks Expedition Security Breach	10 Jul 202400:00	–	cnnvd
Cvelist	CVE-2024-5910 Expedition: Missing Authentication Leads to Admin Account Takeover	10 Jul 202418:39	–	cvelist
GithubExploit	Exploit for OS Command Injection in Paloaltonetworks Expedition	9 Oct 202416:36	–	githubexploit
Exploit DB	Palo Alto Networks Expedition 1.2.90.1 - Admin Account Takeover	6 Apr 202500:00	–	exploitdb
Metasploit	Palo Alto Expedition Remote Code Execution (CVE-2024-5910 and CVE-2024-9464)	13 Nov 202418:55	–	metasploit

NVD

Vulners

Vulnrichment

Node

paloaltonetworks expeditionRange1.2.0–1.2.92

[
  {
    "defaultStatus": "unaffected",
    "product": "Expedition",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "1.2.92",
            "status": "unaffected"
          }
        ],
        "lessThan": "1.2.92",
        "status": "affected",
        "version": "1.2",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2024-5910
horizon3	www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog