CVE Vulnerabilities

CVE-2024-5956

Improper Authentication

Published: Sep 05, 2024 | Modified: Sep 06, 2024
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Intrusion_prevention_system_manager Trellix 11.1.7.97 (including) 11.1.7.97 (including)

Potential Mitigations

References