9.8
Critique
CVE-2024-5671 Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform…
Description
Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vulnerable Trellix IPS Manager.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Intrusion Prevention System (IPS) Manager | Versions non publiées | |
| intrusion_prevention_system_manager 11.1 | premières → < 11.1.x | 11.1.x |
Autres CVE de Intrusion Prevention System (IPS) Manager
Les 4 CVE de Intrusion Prevention System (IPS) Manager →
CVE-2024-5957
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager
6.3
Moyenne
CVE-2024-5956
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to…
6.5
Moyenne
CVE-2024-5731
A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to…
6.8
Moyenne