CVE-2024-11481: Path Traversal

First published: Fri Nov 29 2024(Updated: )

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure forwarding to an AJP backend without adequate validation, and lack of authentication for accessing internal API endpoints.

Credit: trellixpsirt@trellix.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/mitre-cve
• source/MITRE
• agent/references
• agent/weakness
• agent/type
• agent/first-publish-date
• agent/description
• collector/nvd-api
• source/NVD
• agent/author
• agent/last-modified-date
• agent/severity
• agent/tags
• agent/event