FlagThis

CyberSecurity updates
Updated: 2024-10-22 10:45:51 Pacfic
Ameer Owda @ SOCRadar
Critical Vulnerabilities in Palo Alto Networks Expedition Tool Could Expose Firewall Credentials - 11d

Read more: socradar.io

Palo Alto Networks has released patches for critical vulnerabilities found in its Expedition tool, which is used for migrating configurations from different vendors to Palo Alto Networks’ PAN-OS. These vulnerabilities could allow attackers to execute commands, access sensitive data, and potentially compromise firewall administrator accounts. The vulnerabilities include OS command injection, SQL injection, cleartext storage of sensitive data, and Cross-site Scripting (XSS). The most critical vulnerability, CVE-2024-9463, could allow attackers to execute OS commands as root and access sensitive data like usernames, cleartext passwords, and API keys. Organizations using Palo Alto Networks’ Expedition tool are urged to update to version 1.2.96 or later immediately to mitigate these risks. This includes implementing access control measures, regularly monitoring for suspicious activity, and ensuring strong security practices.

References:
  • Vulnerability Archives - SecurityOnline.info reports on the critical vulnerabilities in Palo Alto Networks Expedition - 11d
  • SOCRadar - This SOCRadar article discusses the vulnerabilities in Palo Alto Networks Expedition, emphasizing the importance of timely patching and robust security measures. - 11d
  • Malware Analysis, News and Indicators - This article provides a detailed overview of the critical vulnerabilities in Palo Alto Networks Expedition tool, highlighting the potential impact on firewall credentials and system security. - 11d
  • Horizon3.ai - This article from Horizon3.ai delves into the technical details of the vulnerabilities, outlining the potential impact and providing a detailed walkthrough of how an attacker could exploit them. - 11d
  • github.com - This GitHub repository contains proof-of-concept (PoC) exploits for CVE-2024-9464, demonstrating the vulnerability's potential for exploitation. - 11d
  • Malware Analysis, News and Indicators - Palo Alto Networks recently issued a security advisory, detailing several high-severity vulnerabilities affecting its products. - 11d
  • security.paloaltonetworks.com - This Palo Alto Networks security advisory provides technical details and mitigations for the vulnerabilities discovered in Expedition. - 11d
  • @BSidesNYC - This tweet from BSides NYC mentions the Hunters SOC Platform which can be used to mitigate threats and accelerate security response. This is relevant as it emphasizes the need for efficient security s - 11d
  • security.paloaltonetworks.com - Palo Alto Networks has released patches addressing a set of critical vulnerabilities in its Expedition tool, which, if left unpatched, could lead to severe security risks. These flaws allow attackers - 11d
  • Vulnerability Archives - This article from securityonline.info discusses the vulnerability, emphasizing the potential for credential theft and highlighting the release of a proof-of-concept exploit. - 11d
  • Vulnerability Archives - CVE-2024-9465 (CVSS 9.2) SQLi Flaw in Palo Alto Expedition Revealed: Full Exploit & PoC Published - 11d
  • sra.io - Multiple Critical Vulnerabilities Discovered in Palo Alto Networks Expedition Application - 11d
  • Security Risk Advisors - Multiple Critical Vulnerabilities Discovered in Palo Alto Networks Expedition Application - 10d
  • www.darkreading.com - DarkReading's article discussing NIST's new password guidelines and their impact on security practices. - 10d
  • Malware Analysis, News and Indicators - Malware.news discusses NIST’s new password standards and their implications for security - 10d
  • Malware Analysis, News and Indicators - Patch now! Palo Alto Expedition vulnerabilities could leak firewall credentials - 10d
  • ThreatDown by Malwarebytes - Patch now! Palo Alto Expedition vulnerabilities could leak firewall credentials - 10d
  • gist.github.com - Zendesk Backdoor Vulnerability - 8d

Classification:

This site is an experimental news aggregator using feeds I personally follow. You can reach me using contacts documented at my website here (https://royans.net/) if you have feedback. You can also find Flathis at Mastodon.