CVE-2024-9466CWE-532

Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure

High · published October 9, 2024

CVSS v4.0
8.2
EPSS
14%
Percentile
96.5
In the wild
Unconfirmed
What it is

A cleartext storage of sensitive information vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to reveal firewall usernames, passwords, and API keys generated using those credentials.

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber
EPSS
0.13584 · 96.5th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2024-10-09T17:04Z
EPSS history
Timeline
  • 09 OCT 17:04Z
    Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure
    cvelistv5