CVE-2024-9466: Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure
A cleartext storage of sensitive information vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to reveal firewall usernames, passwords, and API keys generated using those credentials.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Palo Alto Networks Expeditionto a version that resolves this vulnerability.Fixed in 1.2.96 - Operational
After upgrading to Expedition 1.2.96 or later, rotate all Expedition usernames, passwords, and API keys, as well as all firewall usernames, passwords, and API keys processed by Expedition.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9466?
CVE-2024-9466 has been rated as a high severity vulnerability due to the risk of exposing sensitive credentials.
How do I fix CVE-2024-9466?
To fix CVE-2024-9466, upgrade Palo Alto Networks Expedition to version 1.2.96 or later.
What types of sensitive information are exposed by CVE-2024-9466?
CVE-2024-9466 can potentially expose firewall usernames, passwords, and API keys.
Who is affected by CVE-2024-9466?
CVE-2024-9466 affects users of Palo Alto Networks Expedition versions prior to 1.2.96.
Can an unauthenticated attacker exploit CVE-2024-9466?
No, an authenticated attacker is required to exploit CVE-2024-9466.