PT-2023-30711 · Trellix · Trellix Windows Dlp Endpoint

Ekokh · Published 2023-09-14 · Updated 2023-09-19 · CVE-2023-4814

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trellix Windows DLP endpoint for windows (affected versions not specified)

Description A Privilege escalation issue exists in the Trellix Windows DLP endpoint for windows, allowing it to be abused to delete any file or folder for which the user does not have permission.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-250

CWE-863

Related Identifiers

CVE-2023-4814

Affected Products

Trellix Windows Dlp Endpoint

References · 6

• https://kcm.trellix.com/corporate/index?page=content&id=SB10407 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4814 · Security Note
• https://osv.dev/vulnerability/CVE-2023-4814 · Vendor Advisory
• https://twitter.com/cracbot/status/1702562935850340390 · Twitter Post
• https://twitter.com/fletch_ai/status/1703198837265826205 · Twitter Post
• https://t.me/cibsecurity/70434 · Telegram Post