CVE-2024-5910
Palo Alto Networks Expedition Missing Authentication Vulnerability
Published Jul 10, 2024 · updated Jun 17, 2026 · paloaltonetworks expedition
Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.
Timeline
Detection, updates, and resolution for this record.
Jul 10, 2024 · Catalog
Detected
Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.
Nov 7, 2024 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Nov 28, 2024 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jun 17, 2026 · Catalog
Updated
Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date Nov 28, 2024
Affected
- cpe paloaltonetworks/expeditionversion unspecified
- vendor Palo Alto Networks Expeditionversion unspecified
Sources
- CISA KEVCVE-2024-5910
Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data.
cisa.gov - CVE.orgCVE-2024-5910
Official CVE identifier
cve.org - FIRST EPSSCVE-2024-5910
30-day exploitation probability 91.7%
first.org - Exploit Database52129
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_linux/http/paloalto_expedition_rce
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2024-5910
Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration s
nvd.nist.gov