Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-4326

Trellix xAgent permission bypass vulnerability

Description

Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions in the removal protection functionality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Trellix xAgent

Default version status: unaffected

  • 0 to < V35.31.22affected

References