Improper Privilege Management in Trellix GetSusp Affects Local Security
CVE-2023-6119

7.8HIGH

Key Information:

Vendor

Trellix

Status
GetSusp
Vendor
CVE Published:
16 November 2023

What is CVE-2023-6119?

An improper privilege management flaw in Trellix GetSusp allows low privilege attackers to exploit a directory created during execution. This vulnerability permits unauthorized access to files typically restricted to higher privilege levels, as GetSusp fails to properly safeguard these directories. Consequently, attackers can hijack file handles with elevated permissions, posing serious risks to system integrity and confidentiality.

Affected Version(s)

GetSusp Windows Prior to 5.0.0.27

References

https://kcm.trellix.com/corporate/index?page=content&id=S...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-6119 : Improper Privilege Management in Trellix GetSusp Affects Local Security