CVE-2024-11482

概要

参考情報

• thrive.trellix.com/s/article/000014058 · Permissions Required
• hackerone.com/reports/2817658 · Exploit

enterprise security manager のその他の脆弱性

• CVE-2024-11481高 8.2A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traver…
• CVE-2023-6071高 7.2 An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to version 11.6.9 allows a remote administrator…
• CVE-2023-6070中 4.3 A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary c…
• CVE-2023-3314高 8.8 A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s). Incomplete neutralization of external …
• CVE-2023-3313高 7.8 An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized special elements may have allowed a…