CVE-2024-5956
- State
- Published
- Severity
- 6.5 Medium
- Published
- Sep 5, 2024
- Updated
- Sep 5, 2024
- Reserved
- Jun 13, 2024
Description
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N | trellix |
Weaknesses
- CWE-305 Authentication Bypass by Primary Weakness
Affected Products
| Product | Versions |
|---|---|
Intrusion Prevention System (IPS) ManagerTrellix |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.