CVE-2024-4176

An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command line variables. A malicious threat actor could execute commands on the victim's browser for sending carefully crafted malicious links to the EDR XConsole end user.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://thrive.trellix.com/s/article/000013455	Permissions Required

Configurations

Configuration 1 (hide)

cpe:2.3:a:trellix:xconsole:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2024-06-13 09:15

Updated : 2024-07-15 16:43

NVD link : CVE-2024-4176

Mitre link : CVE-2024-4176

CVE.ORG link : CVE-2024-4176

JSON object : View

Products Affected

trellix

xconsole

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2024-4176", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}, {"type": "Secondary", "source": "trellixpsirt@trellix.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.3}]}, "published": "2024-06-13T09:15:14.217", "references": [{"url": "https://thrive.trellix.com/s/article/000013455", "tags": ["Permissions Required"], "source": "trellixpsirt@trellix.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "trellixpsirt@trellix.com", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command line variables. A malicious threat actor could execute commands on the victim's browser for sending carefully crafted malicious links to the EDR XConsole end user."}, {"lang": "es", "value": "Una vulnerabilidad de cross-site scripting en EDR XConsole antes de esta versi\u00f3n permit\u00eda a un atacante aprovechar potencialmente una inyecci\u00f3n XSS/HTML utilizando variables de l\u00ednea de comando. Un actor de amenazas malicioso podr\u00eda ejecutar comandos en el navegador de la v\u00edctima para enviar enlaces maliciosos cuidadosamente elaborados al usuario final de EDR XConsole."}], "lastModified": "2024-07-15T16:43:04.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:trellix:xconsole:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F7D8ECD-6AB3-4ABB-9B5F-272367E27B03", "versionEndIncluding": "2024-05-17"}], "operator": "OR"}]}], "sourceIdentifier": "trellixpsirt@trellix.com"}