PT-2022-4663
CVE-2022-38764
·
تاريخ النشر
2022-08-25
·
تاريخ التحديث
2022-09-21
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Trend Micro HouseCall versions 1.62.1.1133 and below
Description
The issue is related to incorrect permission assignment, which could allow a local attacker to escalate privileges due to an overly permissive folder in the product installer. This could potentially enable a remote attacker to elevate their privileges.
Recommendations
For Trend Micro HouseCall versions 1.62.1.1133 and below, consider restricting access to the overly permissive folder in the product installer as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾