Attackers Can Control Destination of Requests, Leveraging Sensitive Information
CVE-2024-5731

6.8MEDIUM

Key Information:

Vendor
Trellix
Status
Intrusion Prevention System (ips) Manager
Vendor
CVE Published:
14 June 2024

Summary

A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the parameter, thereby leveraging sensitive information.

Affected Version(s)

Intrusion Prevention System (IPS) Manager Prior to 11.1.x

References

https://thrive.trellix.com/s/article/000013623

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kentaro Kawane
.
CVE-2024-5731 : Attackers Can Control Destination of Requests, Leveraging Sensitive Information | SecurityVulnerability.io