An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

Palo Alto Expedition versions before 1.2.96 suffer from multiple vulnerabilities:
 - An unauthenticated OS command Injection vulnerability through the `/API/convertCSVtoParquet.php` endpoint (CVE-2024-9264)
 - An authenticated OS command injection vulnerability (CVE-2024-9464)
 - An unauthenticated SQL Injection vulnerability through the `CHECKPOINT.php` endpoint (CVE-2024-9465)
 - A cleartext storage of sensitive information vulnerability (CVE-2024-9466)
 - A reflected Cross-Site Scripting vulnerability (CVE-2024-9467)

The Palo Alto Networks Expedition installed on the remote host is affected by multiple vulnerabilities, including:

  - An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run     arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device     configurations, and device API keys of PAN-OS firewalls. (CVE-2024-9463)     
  - An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run     arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device     configurations, and device API keys of PAN-OS firewalls. (CVE-2024-9464)

  - An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal     Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With     this, attackers can also create and read arbitrary files on the Expedition system. (CVE-2024-9465)

ID	Name	Product	Family	Type	Severity
114457	Palo Alto Expedition < 1.2.96 Multiple Vulnerabilties	Web App Scanning	Component Vulnerability	Check Based	critical
209281	Palo Alto Networks Expedition Multiple Vulnerabilities (CVE-2024-9463)	Nessus	CGI abuses	Remote	critical

Detections

Analytics

CVE-2024-9463

critical

Tenable Plugins

critical

critical