CVE-2023-0400: trellix data_loss_prevention
Vulnerability summary
CVE-2023-0400 is a high (CVSS 8.2) vulnerability in trellix data_loss_prevention. EPSS estimates a 0.42% chance of exploitation in the next 30 days, higher than 34.5% of scored vulnerabilities.
Timeline
- 01-02-2023PublishedVulnerability first disclosed.
- 26-03-2025Last modifiedVulnerability information updated.
Description
The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0. This allowed a local user to bypass DLP controls when uploading sensitive data from a mapped drive into a web email client. Loading from a local driver was correctly prevented. Versions prior to 11.9 correctly detected and blocked the attempted upload of sensitive data.
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA5.9MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:NDiffers
EPSS trend
Probability
0.42%
Chance of exploitation in the next 30 days
Percentile
35%
Versus all other CVEs
30-day change
0.00 pp
From 0.42% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-670Always-Incorrect Control Flow ImplementationThe code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.
- CWE-427Uncontrolled Search Path ElementThe product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Affected systems
Trellix2 products
- data_loss_prevention≥ 11.9.0, < 11.10.0
- data loss prevention (dlp)≥ 11.9.100, ≤ 11.9.x
1 vendor · 2 products