Palo Alto Networks Expedition Arbitrary File Deletion Vulnerability

A vulnerability allowing arbitrary file deletion has been identified in Palo Alto Networks Expedition. This issue enables an unauthenticated attacker to delete files accessible to the www-data user on the host filesystem. Expedition is a migration tool that has reached its End of Life, with no further updates or security fixes planned.

Impact

Exploitation of this vulnerability allows for the deletion of arbitrary files on the host filesystem, potentially leading to disruption of services or loss of important data.

Remediation

Users are advised to update to Expedition version 1.2.101, the last available version before the tool's End of Life. If Expedition is not actively in use, it should be uninstalled or the software should be shut down.