CVE-2024-9466

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Oct 9, 2024
Updated: Oct 17, 2024
CWE ID 312
CWE ID 532

Summary

CVE-2024-9466 is a vulnerability affecting Palo Alto Networks Expedition. This issue permits authenticated attackers to access sensitive information in cleartext. Specifically, they can view firewall usernames, passwords, and API keys, which can be generated using those credentials. This vulnerability poses a significant risk for unauthorized access and data breaches. Attackers can exploit this flaw to gain administrative control over the affected system, potentially leading to serious security consequences. It is recommended that users of Palo Alto Networks Expedition apply the necessary patches or updates to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Paloaltonetworks Expedition

Affected Vendors

  • Palo Alto Networks