{"id":"CVE-2024-5910","aliases":[],"url":"https://o3.security/vulnerability/CVE-2024-5910","summary":"Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition.\n\nNote:…","details":"Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition.\n\nNote: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.","published":"2024-07-10T18:39:26.006Z","modified":"2025-10-21T22:55:49.276Z","cvss":null,"epss":{"score":0.91783,"percentile":0.99808,"asOf":"2026-09-08"},"cisaKev":null,"exploitsKnown":5,"affectedPackages":[],"fix":null,"references":[{"type":"ADVISORY","url":"https://security.paloaltonetworks.com/CVE-2024-5910"},{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-5910"},{"type":"WEB","url":"https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2025-10-21T22:55:49.276Z"}}