New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2022-4326

NVDCIRCLENISA

EUVD-2022-51679 · Published Dec 16, 2022

Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions in the removal protection functionality.

Technologies

Trellix Endpoint SecurityMicrosoft Windows

Weaknesses

CWE-281

CVSS scores

  • v3.16.0CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Privilege Escalation

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot