CVE-2024-0316CWE-460

Improper cleanup vulnerability in FireEye Endpoint Security

Medium · published January 15, 2024

CVSS v3.1
6.8
EPSS
0%
Percentile
23.2
In the wild
Unconfirmed
What it is

Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containment_notify/preview parameter, which could lead to a service outage.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00315 · 23.2th percentile
Weakness
CWE-460 · Improper Cleanup on Thrown Exception
Published
2024-01-15T16:04Z
EPSS history
Timeline
  • 15 JAN 16:04Z
    Improper cleanup vulnerability in FireEye Endpoint Security
    cvelistv5