CVE Vulnerabilities

CVE-2024-5956

Authentication Bypass by Primary Weakness

Published: Sep 05, 2024 | Modified: Sep 06, 2024
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly

Weakness

The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

Affected Software

Name Vendor Start Version End Version
Intrusion_prevention_system_manager Trellix 11.1.7.97 (including) 11.1.7.97 (including)

References