An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8. This allows an attacker with admin access, which is required to place the DLL in the restricted Windows System folder, to elevate their privileges to System by placing a malicious DLL there.
References
| Link | Resource |
|---|---|
| https://kcm.trellix.com/corporate/index?page=content&id=SB10391 | Patch Vendor Advisory |
Configurations
History
07 Nov 2023, 03:51
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8. This allows an attacker with admin access, which is required to place the DLL in the restricted Windows System folder, to elevate their privileges to System by placing a malicious DLL there. |
02 Dec 2022, 13:53
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Trellix agent
Trellix |
|
| CPE | cpe:2.3:a:trellix:agent:*:*:*:*:windows:*:*:* | |
| CWE | CWE-427 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.7 |
| References | (MISC) https://kcm.trellix.com/corporate/index?page=content&id=SB10391 - Patch, Vendor Advisory |
30 Nov 2022, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-11-30 09:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-3859
Mitre link : CVE-2022-3859
CVE.ORG link : CVE-2022-3859
JSON object : View
Products Affected
trellix
- agent
CWE
CWE-427
Uncontrolled Search Path Element