← CVE Intelligence

CVE-2024-0310

Trellix / Trellix Endpoint Security (ENS) Web Control PUBLISHED

Description (CNA)

A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote attacker to alter the response header parameter setting to switch the content security policy into report-only mode, allowing an attacker to bypass the content-security-policy configuration.

Affected (CNA)

Vendor / productVersions
Trellix / Trellix Endpoint Security (ENS) Web Controlaffected Prior to 10.7.0 Update 15

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.