Vulnerability · Published Nov 29, 2023 · Assigned by trellix
CVE-2023-6070
Medium 4.3
In plain English
A medium-severity server-side request forgery in Trellix Enterprise Security Manager (ESM) from Trellix. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Official description
A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary content, potentially altering configuration. This is possible through the certificate validation functionality where the API accepts uploaded content and doesn't parse for invalid data
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Trellix | Trellix Enterprise Security Manager (ESM) | 11.6.8 |
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N