Trellix Intrusion Prevention System (IPS) Manager

• CVE-2024-5957 Medium 6.3 This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager. 0.4%
• CVE-2024-5956 Medium 6.5 This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly 0.4%
• CVE-2024-5731 Medium 6.8 A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the parameter, thereby leveragi 0.3%
• CVE-2024-5671 Critical 9.8 Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vulnerable Trellix IPS Manager. 0.9%