Skip to content
OpenAdvisories
Medium · 4.4 CVE-2023-0221 EUVD-2023-12307GHSA-2q53-9vqw-6g35

Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to by…

Published Jan 13, 2023 · Updated Apr 4, 2025 · Assigned by trellix

Description

Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by ACC using the utilman program.

Affected products

VendorProductAffectedFixed
Trellix Application and Change Control 8.x – < 8.3.4 8.3.4

References