CVE-2022-3859: Medium severity trellix agent vulnerability
An uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8. This allows an attacker with admin access, which is required to place the DLL in the restricted Windows System folder, to elevate their privileges to System by placing a malicious DLL there.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-3859?
CVE-2022-3859 is an uncontrolled search path vulnerability that exists in Trellix Agent (TA) for Windows in versions prior to 5.7.8.
What is the impact of CVE-2022-3859?
The vulnerability allows an attacker with admin access to elevate their privileges to System by placing a malicious DLL in the restricted Windows System folder.
How can an attacker exploit CVE-2022-3859?
To exploit CVE-2022-3859, an attacker would need administrative access to the system and place a malicious DLL in the restricted Windows System folder.
What is the severity of CVE-2022-3859?
The severity of CVE-2022-3859 is medium, with a severity value of 6.7.
How can I fix CVE-2022-3859?
To fix CVE-2022-3859, upgrade Trellix Agent (TA) for Windows to version 5.7.8 or later.