跳转到帖子

Palo Alto Expedition Remote Code Execution (CVE-2024-5910 and CVE-2024-9464)

recommended_posts

发布于
  • Members

Palo Alto Expedition Remote Code Execution (CVE-2024-5910 and CVE-2024-9464)

Disclosed
10/09/2024
Created
11/13/2024

Description

Obtain remote code execution in Palo Alto Expedition version 1.2.91 and below. The first vulnerability, CVE-2024-5910, allows to reset the password of the admin user, and the second vulnerability, CVE-2024-9464, is an authenticated OS command injection. In a default installation, commands will get executed in the context of www-data. When credentials are provided, this module will only exploit the second vulnerability. If no credentials are provided, the module will first try to reset the admin password and then perform the OS command injection.

Author(s)

  • Michael Heinzl
  • Zach Hanley
  • Enrique Castillo
  • Brian Hysell

Platform

Linux,Unix

Architectures

cmd

Development

  • Source Code
  • History
  • 查看数 692
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…