CVE-2024-4844highCWE-798

CVE-2024-4844: falha de alta gravidade em Trellix ePolicy Orchestrator

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ePolicy Orchestrator

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.2%
Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Update 2 allows an attacker with admin privileges on the ePO server to read the contents of the orion.keystore file, allowing them to access the ePO database encryption key. This was possible through using a hard coded password for the keystore. Access Control restrictions on the file mean this would not be exploitable unless the user is the system admin for the server that ePO is running on.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Trellix · ePolicy Orchestrator
CVEs relacionadas — Trellix ePolicy Orchestrator

No mesmo produto, das mais perigosas para as menos.

CVE-2023-5445MEDIUMCVE-2023-5445EPSS 0.4%CVE-2023-5444HIGHCSRF in ePO leading to privilege escalationEPSS 0.4%CVE-2024-4843MEDIUMCVE-2024-4843EPSS 0.3%