Palo Alto Networks Expedition: 3 actively exploited vulnerabilities ยท updates https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465 CVE-2024-5910: Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data. CVE-2024-9463: Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls. CVE-2024-9465: Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system. Added to the CISA KEV catalog on 2024-11-07, 2024-11-14. en Thu, 14 Nov 2024 00:00:00 GMT Palo Alto Networks Expedition: 3 actively exploited vulnerabilities: CISA added CVE-2024-9463 to the KEV catalog (federal deadline 2024-12-05) https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465 https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465#2024-11-14-a376122f Thu, 14 Nov 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> Palo Alto Networks Expedition: 3 actively exploited vulnerabilities: CISA added CVE-2024-9465 to the KEV catalog (federal deadline 2024-12-05) https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465 https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465#2024-11-14-c7247e7d Thu, 14 Nov 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> Palo Alto Networks Expedition: 3 actively exploited vulnerabilities: CISA added CVE-2024-5910 to the KEV catalog (federal deadline 2024-11-28) https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465 https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465#2024-11-07-efe218e6 Thu, 07 Nov 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> Palo Alto Networks Expedition: 3 actively exploited vulnerabilities: CVE-2024-9463 published https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465 https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465#2024-10-09-decf9e83 Wed, 09 Oct 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-9463">Source</a></p> Palo Alto Networks Expedition: 3 actively exploited vulnerabilities: CVE-2024-9465 published https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465 https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465#2024-10-09-655052c9 Wed, 09 Oct 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-9465">Source</a></p> Palo Alto Networks Expedition: 3 actively exploited vulnerabilities: CVE-2024-5910 published https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465 https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465#2024-07-10-4da78930 Wed, 10 Jul 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-5910">Source</a></p>