CVE-2024-5956

This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://thrive.trellix.com/s/article/000013870	Permissions Required

Configurations

Configuration 1 (hide)

cpe:2.3:a:trellix:intrusion_prevention_system_manager:11.1.7.97:*:*:*:*:*:*:*

History

17 Jun 2026, 08:16

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~5.3~~	v2 : unknown v3 : 6.5

06 Sep 2024, 16:25

Type	Values Removed	Values Added
CWE		CWE-287
CVSS	v2 : ~~unknown~~ v3 : ~~6.5~~	v2 : unknown v3 : 5.3
First Time		Trellix intrusion Prevention System Manager Trellix
References	~~() https://thrive.trellix.com/s/article/000013870 -~~	() https://thrive.trellix.com/s/article/000013870 - Permissions Required
Summary		(es) Esta vulnerabilidad permite a atacantes remotos no autenticados eludir la autenticación y obtener acceso parcial a los datos del Trellix IPS Manager vulnerable con datos basura en respuesta principalmente.
CPE		cpe:2.3:a:trellix:intrusion_prevention_system_manager:11.1.7.97:::::::*

05 Sep 2024, 11:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-09-05 11:15

Updated : 2026-06-17 08:16

NVD link : CVE-2024-5956

Mitre link : CVE-2024-5956

CVE.ORG link : CVE-2024-5956

JSON object : View

Products Affected

trellix

intrusion_prevention_system_manager

CWE

CWE-305

Authentication Bypass by Primary Weakness

CWE-287

Improper Authentication

{"id": "CVE-2024-5956", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-5956", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-05T13:11:38.274777Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "trellixpsirt@trellix.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "trellixpsirt@trellix.com", "affectedData": [{"vendor": "Trellix", "product": "Intrusion Prevention System (IPS) Manager", "versions": [{"status": "affected", "version": "11.1.7.97"}], "platforms": ["Windows", "11.1.7.97"], "defaultStatus": "unaffected"}]}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "affectedData": [{"cpes": ["cpe:2.3:a:trellix:intrusion_prevention_system_manager:*:*:*:*:*:*:*:*"], "vendor": "trellix", "product": "intrusion_prevention_system_manager", "versions": [{"status": "affected", "version": "11.1.7.97"}], "defaultStatus": "unaffected"}]}], "published": "2024-09-05T11:15:12.387", "references": [{"url": "https://thrive.trellix.com/s/article/000013870", "tags": ["Permissions Required"], "source": "trellixpsirt@trellix.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "trellixpsirt@trellix.com", "description": [{"lang": "en", "value": "CWE-305"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly"}, {"lang": "es", "value": "Esta vulnerabilidad permite a atacantes remotos no autenticados eludir la autenticaci\u00f3n y obtener acceso parcial a los datos del Trellix IPS Manager vulnerable con datos basura en respuesta principalmente."}], "lastModified": "2026-06-17T08:16:59.047", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:trellix:intrusion_prevention_system_manager:11.1.7.97:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F69AE8A-D07B-4315-80B0-FC8B6DB4815D"}], "operator": "OR"}]}], "sourceIdentifier": "trellixpsirt@trellix.com"}