CVE-2024-9465
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published Oct 9, 2024
Updated: Nov 15, 2024
CWE ID 89
Summary
CVE-2024-9465 is a newly disclosed SQL injection vulnerability affecting Palo Alto Networks Expedition. This issue allows unauthenticated attackers to access sensitive data from the Expedition database, including password hashes, usernames, device configurations, and API keys. Moreover, attackers can manipulate the database to create and read arbitrary files on the Expedition system. This vulnerability poses a serious risk to network security and requires immediate attention and patching from affected organizations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Paloaltonetworks Expedition
Affected Vendors
- Palo Alto Networks