Unauthenticated Remote Attackers Can Bypass Authentication and Gain API Access to Manager

CVE-2024-5957

What is CVE-2024-5957?

This vulnerability allows unauthenticated remote attackers to exploit the Trellix Manager by bypassing authentication mechanisms. By exploiting this flaw, attackers can gain unauthorized access to sensitive APIs, posing significant risks to the integrity and security of the affected systems. Organizations utilizing Trellix Manager should prioritize assessing their exposure to this vulnerability and implement necessary security measures to mitigate the impact.

References