Medium severity · published Sep 5, 2024
CVE-2024-5956
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in…
5.3
CVSS
0.4%
EPSS
No
On KEV
Description
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Intrusion Prevention System (IPS) Manager · Trellix
11.1.7.97 · source: vendor
IP
Intrusion Prevention System Manager · Trellix
11.1.7.97 · source: NVD, CISA
Affected product
IP
Intrusion Prevention System (IPS) Manager
Trellix
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-5956
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-5956
Permissions Required
https://thrive.trellix.com/s/article/000013870
More from Intrusion Prevention System (IPS) Manager
9.8
CVE-2024-5671
Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vulnerable Trellix IPS…
7.5
CVE-2024-5957
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager
6.8
CVE-2024-5731
A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the…