CVE-2024-5910: Missing Authentication for Critical Function

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credential...

Palo Alto Networks Expedition Security Breach

Palo Alto Networks Expedition is a tool that helps with configuration migration, tuning and enrichment from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Expedition that stems from a lack of authentication for critical functionality, causing an attacker with netwo...

CVE-2024-5910

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credential...

PT-2024-5656

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Expedition versions prior to 1.2.92 Description The vulnerability is related to a missing authentication mechanism for a critical function in Palo Alto Networks Expedition, allowing an attacker with network access to take ov...

PT-2024-41459

Уязвимость файла установки initSetup v2.0.sh инструмента миграции конфигурации Expedition связана с использованием жестко закодированных учетных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...

Friday Squid Blogging: Searching for the Colossal Squid

A cruise ship is searching for the colossal squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

expedition.com.tw Cross Site Scripting vulnerability OBB-2556998

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Configuration The Expedition Migration tool Session Replacement Code Execution

The vulnerability of the The Expedition Migration tool relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to replace the user during an session and execute arbitrary code...

Palo Alto Expedition Cross-Site Scripting (PAN-SA-2019-0003)

A cross-site scripting XSS vulnerability exists in Palo Alto Expedition Migration Tool in version 1.1.x prior to 1.1.7 due to improper validation of user-supplied input before returning it to users. An authenticated remote attacker may be able to inject arbitrary JavaScript or HTML in the User...

Palo Alto Expedition < 1.1.13 Cross-Site Scripting Vulnerability (PAN-SA-2019-0009)

A cross-site scripting XSS vulnerability exists in Palo ALto Expedition Migration Tool due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this, by convincing a user to click a specially crafted URL, to execute arbitrary...

Palo Alto Expedition Cross-Site Scripting

Multiple cross-site scripting XSS vulnerability exists in Palo ALto Expedition Migration Tool in versions less than or equal to 1.1.8 due to improper validation of user-supplied input before returning it to users. - An authenticated remote attacker may be able to inject arbitrary JavaScript or HT...

Friday Squid Blogging: 13-foot Giant Squid Caught off New Zealand Coast

It's probably a juvenile: Researchers aboard the New Zealand-based National Institute of Water and Atmospheric Research Ltd NIWA research vessel Tangaroa were on an expedition to survey hoki, New Zealand's most valuable commercial fish, in the Chatham Rise ­ an area of ocean floor to the east of...

Palo Alto Networks Expedition Migration Tool Cross-Site Request Forgery Vulnerability

Palo Alto Networks Expedition Migration Tool is a security policy configuration migration tool from Palo Alto Networks, USA. A cross-site request forgery vulnerability exists in Palo Alto Networks Expedition Migration Tool. The vulnerability stems from a web application that does not adequately...

CVE-2020-1977

Insufficient Cross-Site Request Forgery XSRF protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier...

CVE-2020-1977

Insufficient Cross-Site Request Forgery XSRF protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier...

Cross site scripting

Insufficient Cross-Site Request Forgery XSRF protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier...

CVE-2020-1977 Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.

Insufficient Cross-Site Request Forgery XSRF protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier...

CVE-2020-1977

CVE-2020-1977 affects Palo Alto Networks Expedition Migration Tool (v1.1.51 and earlier). The root cause is insufficient anti-cross-site request forgery protections in the web application, allowing remote unauthenticated attackers to hijack administrator sessions and perform actions on the tool. ...

Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.

Insufficient Cross-Site Request Forgery XSRF protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier...

PT-2020-3032

Name of the Vulnerable Software and Affected Versions Expedition Migration Tool versions 1.1.51 and earlier Description The issue is related to insufficient Cross-Site Request Forgery XSRF protection, which can be exploited by a remote attacker to hijack the authentication of administrators and...