CVE-2024-9466

A cleartext storage of sensitive information vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to reveal firewall usernames, passwords, and API keys generated using those credentials.

CVSS v4.0

8.2 HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Amber

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

13.48% chance of exploitation in the next 30 days, 96th percentile

Published

2024-10-09

Updated

2025-09-04

Proof-of-concept exploits (2)

• https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromis…
• holypryx/CVE-2024-94661★ · 2024-10-19

Exploit collections (1)

• zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2024/CVE-2024-9466.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2024-10140
• CVE-2024-9465
• CVE-2024-9473
• CVE-2024-9464
• CVE-2024-9474
• CVE-2024-9463