CVE-2018-10143

Description

The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application.

Affected products

• Palo Alto Networks / Palo Alto Networks ExpeditionExpedition 1.0.107 and earlier – Expedition 1.0.107 and earlier

References

• MISChttp://www.securityfocus.com/bid/106174
• MISChttps://doddsecurity.com/234/command-injection-on-palo-alto-networks-expedition/
• MISChttps://security.paloaltonetworks.com/CVE-2018-10143