CVE-2024-7608

State: Published
Severity: 5.9 Medium
Published: Aug 27, 2024
Updated: Aug 28, 2024
Reserved: Aug 8, 2024

Description

An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal.

Scores

CVSS	Score	Vector	Source
3.1	5.9 Medium	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H	trellix

Weaknesses

CWE-35 Path Traversal: '.../...//'

Affected Products

Product	Versions
Trellix NX, EX, AX, FX, CMS and IVXTrellix	Trellix NX, EX, AX, FX, CMS 10.0.1 and older, for Trellix IVX 10.02. and olderAffected

References

https://thrive.trellix.com/s/article/000013844

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.