Medium severity · published Sep 5, 2024
CVE-2024-5956
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in…
5.3
CVSS
0.4%
EPSS
No
On KEV
Description
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Intrusion Prevention System (IPS) Manager · Trellix
11.1.7.97 · source: vendor
IP
Intrusion Prevention System Manager · Trellix
11.1.7.97 · source: NVD, CISA
Affected product
IP
Intrusion Prevention System (IPS) Manager
Trellix
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-5956
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-5956
Permissions Required
https://thrive.trellix.com/s/article/000013870
More from Intrusion Prevention System (IPS) Manager
7.5
CVE-2024-5957
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager