CVE-2024-5910

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Expedition versions prior to 1.2.92

Description The vulnerability is related to a missing authentication mechanism for a critical function in Palo Alto Networks Expedition, allowing an attacker with network access to take over an admin account and potentially access configuration secrets, credentials, and other data. This issue has been actively exploited by attackers, and it is recommended to update to the latest version to mitigate the risks.

Recommendations Update to Palo Alto Networks Expedition version 1.2.92 or later to fix the missing authentication vulnerability. As a temporary workaround, consider restricting access to the Expedition server to minimize the risk of exploitation.