CVE-2023-3946

CVSS V2 None CVSS V3 None

Description

A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 SP1 Update 1allows a remote unauthenticated attacker to potentially obtain access to an ePO administrator's session by convincing the authenticated ePO administrator to click on a carefully crafted link. This would lead to limited access to sensitive information and limited ability to alter some information in ePO.

Overview

CVE ID
CVE-2023-3946

Assigner
trellix

Vulnerability Status
PUBLISHED

Published Version
2023-07-26T05:10:44.967Z

Last Modified Date
2023-07-26T05:10:44.967Z

Weakness Enumerations

CWE	URL
CWE-79	http://cwe.mitre.org/data/definitions/79.html

References

Reference URL	Reference Tags
https://kcm.trellix.com/corporate/index?page=content&id=SB10402

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-3946
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3946

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 20:19:40				Added to TrackCVE