Path Traversal in Trellix Application And Change Control
CVE-2023-5607
An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extension, for on-premises ePO servers, prior to version 8.4.0 could lead to an authorised administrator attacker executing arbitrary code through uploading a specially crafted GTI reputation file. The attacker would need the appropriate privileges to access the relevant section of the User Interface. The import logic has been updated to restrict file types and content.
Vulnerability class: Path Traversal (Directory Traversal)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.009 (59.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 59th percentile — 59.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.009 · newest: 0.009 · change: 0.000
Affected products
- Trellix Application And Change Control
- Trellix Application And Change Control (Tacc) — versions Prior to version 8.4.0
Weakness classification (CWE)
References
- kcm.trellix.com/corporate/index (Vendor Advisory)
Frequently asked questions
- What is CVE-2023-5607?
- CVE-2023-5607 is a high-severity vulnerability in Trellix Application And Change Control, classified under Path Traversal. CVSS score: 8.4/10. Published 2023-11-27.
- How severe is CVE-2023-5607?
- High severity. CVSS v3 base score is 8.4 out of 10.