CVE-2023-6070

MEDIUM

Trellix ESM <11.6.8 - Authenticated Server-Side Request Forgery via Certificate Upload

Title source: manual
STIX 2.1

Description

A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary content, potentially altering configuration. This is possible through the certificate validation functionality where the API accepts uploaded content and doesn't parse for invalid data

References (1)

Core 1

Scores

CVSS v3 4.3
EPSS 0.0024
EPSS Percentile 15.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-918
Status published
Products (1)
trellix/enterprise_security_manager < 11.6.8
Published Nov 29, 2023
Tracked Since Feb 18, 2026