Aller au contenu
Se connecter
8.2 Élevée

CVE-2024-11481 A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API

Description

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure forwarding to an AJP backend without adequate validation, and lack of authentication for accessing internal API endpoints.

Produits et versions touchés

Produit Versions touchées Corrigé en
Trellix Enterprise Security Manager (ESM) 11.6.12 Pas de correctif indiqué
enterprise_security_manager 11.6.12 Pas de correctif indiqué

Autres CVE de Trellix Enterprise Security Manager (ESM)

Les 3 CVE de Trellix Enterprise Security Manager (ESM) →
CVE-2024-11482 A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code… 9.8 Critique CVE-2023-6070 A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to… 4.3 Moyenne
Suivre cette CVE