CVE-2024-4844

Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Update 2 allows an attacker with admin privileges on the ePO server to read the contents of the orion.keystore file, allowing them to access the ePO database encryption key. This was possible through using a hard coded password for the keystore. Access Control restrictions on the file mean this would not be exploitable unless the user is the system admin for the server that ePO is running on.

• CWE-798

• https://thrive.trellix.com/s/article/000013505
• https://thrive.trellix.com/s/article/000013505

Published

May 16, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-48424A heap-buffer-overflow vulnerability has been identified in …5.5
• CVE-2024-48425A segmentation fault (SEGV) was detected in the Assimp::Spli…5.5
• CVE-2024-48426A segmentation fault (SEGV) was detected in the SortByPTypeP…6.2
• CVE-2024-48427A SQL injection vulnerability in Sourcecodester Packers and …8.8
• CVE-2024-48428An issue in Olive VLE allows an attacker to obtain sensitive…9.8
• CVE-2024-4843ePO doesn't allow a regular privileged user to delete tasks …4.3
• CVE-2024-48440Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router…8.8
• CVE-2024-48441Wuhan Tianyu Information Industry Co., Ltd Tianyu CPE Router…8.8
• CVE-2024-48442Incorrect access control in Shenzhen Tuoshi Network Communic…6.5
• CVE-2024-48445An issue in compop.ca ONLINE MALL v.3.5.3 allows a remote at…9.8
• CVE-2024-48448An arbitrary file upload vulnerability in Huly Platform v0.6…6.1
• CVE-2024-4845The Icegram Express plugin for WordPress is vulnerable to SQ…8.8