CVE-2024-5910 PoC — Expedition: Missing Authentication Leads to Admin Account Takeover

Source

Associated Vulnerability

Description

CVE-2024-5910 PoC

Readme

# Palo Alto Expedition (CVE-2024-5910): Missing Authentication Leads to Admin Account Takeover

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.

## Affected versions

From 1.2.0 (including) to 1.2.92 (excluding)


## Prerequisites
Before running the script, make sure you have:
- Python 3.x installed on your system.
- And run `pip install -r requirements.txt` to make sure the depndecies are satisfied.

## Usage

### Basic Example (Command Injection)

```bash
python3 CVE-2024-5910.py -u https://target.com
```


## Disclaimer
This project is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage caused by this tool.


## License

This project is licensed under the MIT License.

File Snapshot

 [4.0K]  /data/pocs/09fff6abfffdd41154d156222c46aa2c5fc3df7e
├── [ 713]  CVE-2024-5910.py
├── [1.0K]  LICENSE
├── [1.1K]  README.md
└── [  25]  requirements.txt

0 directories, 4 files

Remarks