CVE-2024-5956

MEDIUM

Trellix Intrusion Prevention System Manager - Unauthenticated Authentication Bypass

Title source: llm
STIX 2.1

Description

This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly

References (1)

Core 1
Core References

Scores

CVSS v3 6.5
EPSS 0.0039
EPSS Percentile 30.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-305 CWE-287
Status published
Products (1)
trellix/intrusion_prevention_system_manager 11.1.7.97
Published Sep 05, 2024
Tracked Since Feb 18, 2026