We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library. This may impair endpoint defenses and allow the attacker to achieve code execution with SYSTEM-level privileges.
Reserved 2025-01-23 | Published 2025-07-21 | Updated 2025-07-21 | Assigner trellixCWE-94 Improper Control of Generation of Code ('Code Injection')
thrive.trellix.com/s/article/000014450
Support options
