Skip to content
Sign in
9.8 Critical

CVE-2024-11482 A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code…

Description

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection, executed as the root user.

Affected products and versions

Product Affected versions Fixed in
Trellix Enterprise Security Manager (ESM) 11.6.12 No fix stated
enterprise_security_manager 11.6.12 No fix stated

Other CVEs of Trellix Enterprise Security Manager (ESM)

The 3 CVEs of Trellix Enterprise Security Manager (ESM) →
CVE-2024-11481 A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API 8.2 High CVE-2023-6070 A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to… 4.3 Medium
Track this CVE