CVE search · CVE-2024-5956
CVE-2024-5956
medium 5.3
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- trellixpsirt@trellix.com
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
trellixpsirt@trellix.comSecondary |
| CVSS 3.1 | medium 5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- trellix · intrusion_prevention_system_manager
References
- https://thrive.trellix.com/s/article/000013870Permissions Required