CVE-2023-0976CWE-427

A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file into the…

Medium · published June 7, 2023

CVSS v3.1
6.3
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file into the /Library/Trellix/Agent/bin/ folder. The malicious file is executed by running the TA deployment feature located in the System Tree.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00622 · 49.1th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2023-06-07T07:35Z
EPSS history
Timeline
  • 07 JUN 07:35Z
    A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file into the…
    cvelistv5