This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2023-0976 | BDVDB-2026-204263 Detail

TrellixTrellix Agent

Description#

A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file into the /Library/Trellix/Agent/bin/ folder. The malicious file is executed by running the TA deployment feature located in the System Tree.

Impact#

CAPEC-38 Leveraging/Manipulating Configuration File Search Paths

Weaknesses#

  • CWE-427 Uncontrolled Search Path Element

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.