Description
A vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local users, during install/upgrade workflow, to replace one of the Agent’s executables before it can be executed. This allows the user to elevate their permissions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Trellix | Trellix Agent | 5.7.8 – ≤ 5.7.8 | — |
Advisories 1
- WID-SEC-2023-0817 Trellix Agent: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 30, 2023