CVE-2022-4326 — Trellix xAgent permission bypass vulnerability

CVE-2022-4326

Trellix xAgent permission bypass vulnerability PUBLISHED

Description (CNA)

Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions in the removal protection functionality.

Affected (CNA)

Vendor / product	Versions
Trellix / xAgent	affected 0 before V35.31.22

CWE

CWE-281

References

https://docs.trellix.com/bundle/xagent_35-31-22_rn/page/UUID-73c848e7-6107-fe11-d83d-b17bd5b1449c.html

ADP enrichment

CVE

No English description supplied.

https://docs.trellix.com/bundle/xagent_35-31-22_rn/page/UUID-73c848e7-6107-fe11-d83d-b17bd5b1449c.html

CISA-ADP

No English description supplied.

No references supplied.