CVE-2023-4814 Privilege escalation in Data Loss Prevention Endpoint for Windows
Attackers can escalate privileges to delete unauthorized files or folders in Trellix Windows DLP Endpoint.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-4814?
CVE-2023-4814 is a high-severity vulnerability in Trellix Data Loss Prevention Endpoint for Windows, published on 14 Sep 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which can be abused to delete any file/folder for which the user does not have permission to.
Which versions are affected by CVE-2023-4814?
It affects 1 product.
Products include Trellix Data Loss Prevention.
How do I fix CVE-2023-4814?
No fix has been published for CVE-2023-4814 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-4814 being exploited?
There is no known exploitation of CVE-2023-4814 in the wild and no public exploit code.
Other vulnerabilities in Trellix Data Loss Prevention Endpoint for Windows
Sources
Also known as GHSA-p9gv-jgw3-97q9.