9.8
Critical
CVE-2024-5671 Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform…
Description
Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vulnerable Trellix IPS Manager.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Intrusion Prevention System (IPS) Manager | Versions not published | |
| intrusion_prevention_system_manager 11.1 | earliest → < 11.1.x | 11.1.x |
Other CVEs of Intrusion Prevention System (IPS) Manager
The 4 CVEs of Intrusion Prevention System (IPS) Manager →
CVE-2024-5957
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager
6.3
Medium
CVE-2024-5956
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to…
6.5
Medium
CVE-2024-5731
A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to…
6.8
Medium