Lucene search

TrellixCVE-2024-0311

HistoryMar 14, 2024 - 9:15 a.m.

CVE-2024-0311

2024-03-1409:15:46

CWE-622

trellix

web.nvd.nist.gov

cve-2024-0311

insider threat

policy bypass

skyhigh client proxy

nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.0%

JSON

A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Skyhigh Client Proxy",
    "vendor": "Skyhigh",
    "versions": [
      {
        "status": "affected",
        "version": "4.8.1"
      }
    ]
  }
]

References

kcm.trellix.com/corporate/index?page=content&id=SB10418

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-0311