CVE-2024-0315: Remote file inclusion vulnerability in FireEye Central Management

Published Jan 15, 2024

Updated

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. This vulnerability allows an attacker to upload a malicious PDF file to the system during the report creation process.

Affected Software

1 affected component

FireEye Central Management=9.1.1.956704

Remediation

Information

The FireEye team is working on fixing the reported vulnerabilities. It is recommended to update affected products to the latest version available.

Event History

Jan 15, 2024

CVE Published

via MITRE·04:02 PM

Data Sourced

via MITRE·04:02 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-0315?

CVE-2024-0315 is classified as a critical vulnerability due to its potential for remote file inclusion.

How do I fix CVE-2024-0315?

To mitigate CVE-2024-0315, users should upgrade to the latest version of FireEye Central Management that addresses this vulnerability.

What versions of FireEye Central Management are affected by CVE-2024-0315?

CVE-2024-0315 specifically affects FireEye Central Management version 9.1.1.956704.

What type of attack is possible with CVE-2024-0315?

CVE-2024-0315 allows an attacker to upload a malicious PDF file to the system during the report creation process.

Is there a workaround for CVE-2024-0315?

Currently, the recommended action for CVE-2024-0315 is to apply the available patches rather than relying on workarounds.