CVE-2024-5910 - CVE House

Back to Database

Status published Critical CVE-2024-5910

Expedition: Missing Authentication Leads to Admin Account Takeover

9.3 CVSS

Vulnerability Description

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-5910

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Brian Hysell (Synopsys CyRC)

References

https://security.paloaltonetworks.com/CVE-2024-5910

More from Palo Alto Networks

View All →

PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets

Prisma Browser: Sensitive Information Disclosure Vulnerability in Prisma Browser

Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma Browser

Prisma Browser: Insufficient Validation of Untrusted Input Vulnerability in Prisma Browser

PAN-OS: Improper Neutralization of Input in the Management Web Interface

Affected Vendor

Palo Alto Networks

View all reports →

Affected Software

Expedition

Vulnerable Versions:

1.2

Timeline

Official Publish: July 10th, 2024

Last Modified: October 21st, 2025

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1078 Valid Accounts

T1136 Create Account

T1098 Account Manipulation

Privilege Escalation

T1021 Remote Services

Lateral Movement