Maple Labs

CVE search · CVE-2024-11481

CVE-2024-11481

high 8.2

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure forwarding to an AJP backend without adequate validation, and lack of authentication for accessing internal API endpoints.

Open in the NVD CVE.org JSON

Details

Status
Analyzed
Published
Last changed
Source
trellixpsirt@trellix.com
Weakness
CWE-22

Severity

VersionScoreVectorSource
CVSS 3.1 high 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N trellixpsirt@trellix.comSecondary
CVSS 3.1 high 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • trellix · enterprise_security_manager

References