Path Traversal in Trellix Application And Change Control
CVE-2023-5607
An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extension, for on-premises ePO servers, prior to version 8.4.0 could lead to an authorised administrator attacker executing arbitrary code through uploading a specially crafted GTI reputation file. The attacker would need the appropriate privileges to access the relevant section of the User Interface. The import logic has been updated to restrict file types and content.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.009 (57.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H.
Affected products
- Trellix Application_and_change_control
- Trellix Application And Change Control (Tacc) — versions Prior to version 8.4.0
Weakness classification (CWE)
References
- trellixpsirt@trellix.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2023-5607?
- CVE-2023-5607 is a high-severity vulnerability in Trellix Application And Change Control, classified under Path Traversal. CVSS score: 8.4/10. Published 2023-11-27.
- How severe is CVE-2023-5607?
- High severity. CVSS v3 base score is 8.4 out of 10.