Significant Hardcoded Cryptographic Key Vulnerability in Trellix DLP Extension

CVE-2024-9679

Summary

CVE-2024-9679 describes a severe vulnerability identified within the Trellix DLP Extension version 11.11.1.3. This vulnerability arises from the existence of a hardcoded cryptographic key that compromises the integrity of user credentials. Attackers can exploit this flaw to decrypt previously secured user credentials, thereby gaining unauthorized access to sensitive data and potentially leading to extensive data breaches. Organizations using this affected version must prioritize updates to mitigate this significant security risk.

References