CVE-2023-5607: Path Traversal
An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extension, for on-premises ePO servers, prior to version 8.4.0 could lead to an authorised administrator attacker executing arbitrary code through uploading a specially crafted GTI reputation file. The attacker would need the appropriate privileges to access the relevant section of the User Interface. The import logic has been updated to restrict file types and content.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-5607?
CVE-2023-5607 is an improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extension.
What is the severity of CVE-2023-5607?
The severity of CVE-2023-5607 is high with a severity value of 8.4.
Which software is affected by CVE-2023-5607?
Trellix Application And Change Control versions up to 8.4.0 are affected by CVE-2023-5607.
How can an attacker exploit CVE-2023-5607?
An attacker can exploit CVE-2023-5607 by uploading a specially crafted GTI reputat file and executing arbitrary code.
How can I fix CVE-2023-5607?
To fix CVE-2023-5607, upgrade the TACC ePO extension to version 8.4.0 or newer.