Multiple Vulnerabilities in Palo Alto Network’s Expedition Could Allow for Arbitrary Code Execution

Multiple high-severity vulnerabilities were discovered in Palo Alto Networks Expedition, including unauthenticated OS command injection and SQL injection that can lead to root-level code execution and disclosure of usernames, cleartext passwords, device configurations, and PAN-OS API keys; additional lower-severity issues include cleartext storage of credentials and reflected XSS. Successful exploitation could allow attackers to install programs, view/change/delete data, and potentially compromise managed firewalls and their API access.