PT-2023-30711 · Trellix · Trellix Windows Dlp Endpoint

Ekokh · Publicado 2023-09-14 · Atualizado 2023-09-19 · CVE-2023-4814

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trellix Windows DLP endpoint for windows (affected versions not specified)

Description A Privilege escalation issue exists in the Trellix Windows DLP endpoint for windows, allowing it to be abused to delete any file or folder for which the user does not have permission.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Enumeração de Fraquezas

CWE-250

CWE-863

Identificadores relacionados

CVE-2023-4814

Produtos afetados

Trellix Windows Dlp Endpoint

Referências · 6

• https://twitter.com/cracbot/status/1702562935850340390 · Publicação no Twitter
• https://kcm.trellix.com/corporate/index?page=content&id=SB10407 · Aviso do Fabricante
• https://twitter.com/fletch_ai/status/1703198837265826205 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-4814 · Nota de Segurança
• https://t.me/cibsecurity/70434 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-4814 · Aviso do Fabricante