Command Injection Flaw in ESM Affects Trellix

CVE-2023-6071

What is CVE-2023-6071?

A command injection vulnerability exists in ESM prior to version 11.6.9 due to insufficient input sanitization when adding a new data source. This flaw allows a remote administrator to execute arbitrary code as the root user on the system, posing significant risks to the integrity and security of the affected environment. Proper mitigation strategies should be implemented to address this vulnerability and protect against potential exploitation.

References