CVE-2023-4814: High severity trellix data loss prevention vulnerability
Published Sep 14, 2023
·Updated
A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which can be abused to delete any file/folder for which the user does not have permission to.
Affected Software
1 affected component
Trellix Data Loss Prevention=11.10.100.17
Event History
Sep 14, 2023
CVE Published
via MITRE·06:43 AM
Data Sourced
via MITRE·06:43 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-4814?
CVE-2023-4814 is a Privilege escalation vulnerability that exists in Trellix Windows DLP endpoint for Windows.
2
How can CVE-2023-4814 be exploited?
CVE-2023-4814 can be exploited to delete any file or folder for which the user does not have permission.
3
What is the affected software for CVE-2023-4814?
Trellix Data Loss Prevention version 11.10.100.17 is affected by CVE-2023-4814.
4
What is the severity of CVE-2023-4814?
The severity of CVE-2023-4814 is high, with a CVSS score of 7.1.
5
How can I fix CVE-2023-4814?
It is recommended to update Trellix Data Loss Prevention to a patched version that addresses CVE-2023-4814.