Description
A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file into the /Library/Trellix/Agent/bin/ folder. The malicious file is executed by running the TA deployment feature located in the System Tree.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Trellix | Trellix Agent | 5.7.8 | — |
Advisories 1
- WID-SEC-2023-1387 Trellix Agent: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 6, 2023