PT-2023-16658 · Trellix · Ta

Adam Scheblein · Publicado 2023-06-07 · Atualizado 2023-06-13 · CVE-2023-0976

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TA for mac-OS versions prior to 5.7.9

Description A command injection issue allows local users to place an arbitrary file into the /Library/Trellix/Agent/bin/ folder. The malicious file is executed by running the TA deployment feature located in the System Tree.

Recommendations For versions prior to 5.7.9, update to version 5.7.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the TA deployment feature in the System Tree to minimize the risk of exploitation.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2023-0976

Produtos afetados

Ta

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-0976 · Nota de Segurança
• https://kcm.trellix.com/corporate/index?page=content&id=SB10398 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-0976 · Aviso do Fabricante
• https://t.me/cvenotify/52000 · Publicação no Telegram