CVE-2024-9466: Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure
Published Oct 9, 2024
·Updated
A cleartext storage of sensitive information vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to reveal firewall usernames, passwords, and API keys generated using those credentials.
Affected Software
1 affected component
Palo Alto Networks Expedition>=1.2.0<1.2.96
Remediation
Information
The fixes for all listed issues are available in Expedition 1.2.96, and all later Expedition versions.
The affected cleartext file will be removed automatically during the upgrade.
All Expedition usernames, passwords, and API keys should be rotated after upgrading to the fixed version of Expedition.
All firewall usernames, passwords, and API keys processed by Expedition should be rotated after updating.
Event History
Oct 9, 2024
CVE Published
via MITRE·05:04 PM
Data Sourced
via MITRE·05:04 PM
RemedyDescriptionWeakness
News Published
via BleepingComputer·06:59 PM
News Published
via BleepingComputer·06:59 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-9466?
CVE-2024-9466 has been rated as a high severity vulnerability due to the risk of exposing sensitive credentials.
2
How do I fix CVE-2024-9466?
To fix CVE-2024-9466, upgrade Palo Alto Networks Expedition to version 1.2.96 or later.
3
What types of sensitive information are exposed by CVE-2024-9466?
CVE-2024-9466 can potentially expose firewall usernames, passwords, and API keys.
4
Who is affected by CVE-2024-9466?
CVE-2024-9466 affects users of Palo Alto Networks Expedition versions prior to 1.2.96.
5
Can an unauthenticated attacker exploit CVE-2024-9466?
No, an authenticated attacker is required to exploit CVE-2024-9466.