Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s). Incomplete neutralization of external commands used to control the process execution of the .zip application allows an authorized user to obtain control of the .zip application to execute arbitrary commands or obtain elevation of system privileges.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Trellix Enterprise Security Manager 操作系统命令注入漏洞
Vulnerability Description
Trellix Enterprise Security Manager是美国火眼（Trellix）公司的一个应用程序。用于实时监控和分析使您能够快速确定隐藏威胁的优先级、调查和响应。 Trellix Enterprise Security Manager 11.6.3版本及之前版本存在安全漏洞，该漏洞源于未能全面清理zip文件。攻击者利用该漏洞可以升级权限或执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A