Skip to content
Sign in
8.2 High

CVE-2024-11481 A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API

Description

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure forwarding to an AJP backend without adequate validation, and lack of authentication for accessing internal API endpoints.

Affected products and versions

Product Affected versions Fixed in
Trellix Enterprise Security Manager (ESM) 11.6.12 No fix stated
enterprise_security_manager 11.6.12 No fix stated

Other CVEs of Trellix Enterprise Security Manager (ESM)

The 3 CVEs of Trellix Enterprise Security Manager (ESM) →
CVE-2024-11482 A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code… 9.8 Critical CVE-2023-6070 A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to… 4.3 Medium
Track this CVE