QID 379093

Trellix ePolicy Orchestrator is a centralized security management platform to orchestrate and manage all your endpoints.

CVE-2023-5444: A Cross Site Request Forgery vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2 allows a remote low privilege user to successfully add a new user with administrator privileges to the ePO server.
CVE-2023-5445: An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged user to modify the URL parameter for the purpose of redirecting URL request(s) to a malicious site.

Affected Versions:
Trellix ePolicy Orchestrator (ePO) prior to 5.10.0 SP1 Update 2
QID Detection Logic:
This checks for vulnerable versions of Trellix ePolicy Orchestrator (ePO).

Successful exploitation of this vulnerability may affect confidentiality, integrity and availability of the data.