← CVE Intelligence

CVE-2024-4843

Trellix / ePolicy Orchestrator PUBLISHED

Description (CNA)

ePO doesn't allow a regular privileged user to delete tasks or assignments. Insecure direct object references that allow a least privileged user to manipulate the client task and client task assignments, hence escalating his/her privilege.

Affected (CNA)

Vendor / productVersions
Trellix / ePolicy Orchestratoraffected versions previous to ePO 5.10 Service Pack 1 Update 2

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.