high
CISA KEV
CVE-2024-5910
Palo Alto Networks Expedition Missing Authentication Vulnerability
// Description
Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data.
// Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal remediation due Nov 28, 2024 — past due
Advertisement