Lucene search

K
cvelistTrellixCVELIST:CVE-2024-0206
HistoryJan 09, 2024 - 12:56 p.m.

CVE-2024-0206

2024-01-0912:56:46
CWE-59
trellix
www.cve.org
vulnerability
trellix anti-malware engine
privilege escalation
symbolic link
registry manipulation
unauthorized files
scanning

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local user to potentially gain an escalation of privileges. This was achieved by adding an entry to the registry under the Trellix ENS registry folder with a symbolic link to files that the user wouldn’t normally have permission to. After a scan, the Engine would follow the links and remove the files

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Anti-Malware Engine",
    "vendor": "Trellix",
    "versions": [
      {
        "status": "affected",
        "version": "6600"
      }
    ]
  }
]

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

Related for CVELIST:CVE-2024-0206