Trellix System Information Reporter Path Traversal Vulnerability Allowing Arbitrary File Creation

A path traversal vulnerability has been identified in Trellix System Information Reporter (SIR) versions through 1.0.3. This vulnerability allows an authenticated user with high privileges to send malicious ePO post requests to the System Information Reporter. As a result, files can be created anywhere on the filesystem, potentially overwriting existing files and leading to unauthorized disclosure of sensitive information.

Impact

Exploitation of this vulnerability could result in arbitrary file creation on the server, with the possibility of overwriting existing files and disclosing sensitive information.