CVE-2022-4326

Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions in the removal protection functionality.

Score

CVSS 3.1 6.0 Medium

Status

Modified - trellixpsirt@trellix.com

Published

2022-12-16

Last modified

2025-04-14

Weaknesses

CWE-281

Affected products

• Endpoint Security (Trellix)
• Xagent (Trellix)

References

• https://docs.trellix.com/bundle/xagent_35-31-22_rn/page/UUID-73c848e7-6107-fe11-d83d-b17bd5b1449c.html