8.1 High

CVE-2023-3314 A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s)

Description

A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s). Incomplete neutralization of external commands used to control the process execution of the .zip application allows an authorized user to obtain control of the .zip application to execute arbitrary commands or obtain elevation of system privileges.

Affected products and versions

Product	Affected versions	Fixed in
Enterprise Security Manager	11.6.3	No fix stated

The 2 CVEs of Enterprise Security Manager →

CVE-2023-3313 An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized special elements… 7.8 High

Do you use Enterprise Security Manager?

Track this CVE Watch Enterprise Security Manager Check my SBOMs

www.cveye.io/en/cve/CVE-2023-3314

Timeline

Published July 3, 2023
Last modified October 25, 2024

References

kcm.trellix.com kcm.trellix.com

Track this CVE

CVE-2023-3314 A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s)

Description

Affected products and versions

Other CVEs of Enterprise Security Manager