Command injection

2023-06-0708:15:00

PRIOn knowledge base

www.prio-n.com

command injection

vulnerability

ta for mac-os

version 5.7.9

arbitrary file

library

trellix

agent

system tree

execution

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.0%

JSON

A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file into the /Library/Trellix/Agent/bin/ folder. The malicious file is executed by running the TA deployment feature located in the System Tree.