An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized special elements may have allowed an unauthorized user to execute system command injection for the purpose of privilege escalation or to execute arbitrary commands.
References
| Link | Resource |
|---|---|
| https://kcm.trellix.com/corporate/index?page=content&id=SB10403 | Vendor Advisory |
Configurations
History
11 Jul 2023, 16:09
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Trellix
Trellix enterprise Security Manager |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | (MISC) https://kcm.trellix.com/corporate/index?page=content&id=SB10403 - Vendor Advisory | |
| CWE | CWE-78 | |
| CPE | cpe:2.3:a:trellix:enterprise_security_manager:*:*:*:*:*:*:*:* |
03 Jul 2023, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-03 08:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-3313
Mitre link : CVE-2023-3313
CVE.ORG link : CVE-2023-3313
JSON object : View
Products Affected
trellix
- enterprise_security_manager
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')