PT-2022-25487

CVE-2022-40710

·

تاريخ النشر

2022-09-23

·

تاريخ التحديث

2024-02-27

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security version 20 Cloud One - Workload Security Agent for Windows (affected versions not specified)
Description A link following issue could allow a local attacker to escalate privileges on affected installations. The attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue.
Recommendations For Trend Micro Deep Security version 20, update to a version that includes a fix for this issue. For Cloud One - Workload Security Agent for Windows, apply the recommended configuration changes or patches as soon as they become available to prevent privilege escalation. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ZDI-22-1296
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾