A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s). Incomplete neutralization of external commands used to control the process execution of the .zip application allows an authorized user to obtain control of the .zip application to execute arbitrary commands or obtain elevation of system privileges.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HTrellix Enterprise Security Manager
APPTrellix< 11.6.7
Powiązane podatności
RCE przez command injection w Trellix Enterprise Security Manager (ESM 11.6.10)
A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to im...
An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to version 11.6.9...
An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized speci...
A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authentica...