9.3
Critical
Exploited
CVE-2024-5910 Palo Alto Networks Expedition Missing Authentication Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Ransomware campaigns
Not observed so far
Weakness
CWE-306
Description
Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Expedition 1.2 | 1.2 → < 1.2.92 | 1.2.92 |
| expedition 1.2 | 1.2 → < 1.2.92 | 1.2.92 |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Expedition
The 12 CVEs of Expedition →
CVE-2025-0107
Expedition: OS Command Injection Vulnerability
7.7
High
CVE-2025-0106
A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate…
6.9
Medium
CVE-2025-0105
An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to…
6.9
Medium
CVE-2025-0104
A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to execute…
7.0
High