What is CVE-2023-6070?

CVE-2023-6070 is a medium-severity vulnerability in Trellix Enterprise Security Manager, classified under Server-Side Request Forgery (SSRF). CVSS score: 4.3/10. Published 2023-11-29.

How severe is CVE-2023-6070?

Medium severity. CVSS v3 base score is 4.3 out of 10.

SSRF in Trellix Enterprise Security Manager

CVE-2023-6070

A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary content, potentially altering configuration. This is possible through the certificate validation functionality where the API accepts uploaded content and doesn't parse for invalid data

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.002 (15.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Trellix Enterprise_security_manager
Trellix Enterprise Security Manager (Esm) — versions 11.6.8

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

References

trellixpsirt@trellix.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-6070?: CVE-2023-6070 is a medium-severity vulnerability in Trellix Enterprise Security Manager, classified under Server-Side Request Forgery (SSRF). CVSS score: 4.3/10. Published 2023-11-29.
How severe is CVE-2023-6070?: Medium severity. CVSS v3 base score is 4.3 out of 10.