PT-2023-23856 · Trend Micro · Trend Micro Mobile Security
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Trend Micro Mobile Security (Enterprise) version 9.8 SP5
Description
The issue allows a remote attacker to create arbitrary files on affected installations. To exploit this, an attacker must first obtain the ability to execute low-privileged code on the target system.
Recommendations
For Trend Micro Mobile Security (Enterprise) version 9.8 SP5, consider restricting access to the
set certificates config function as a temporary workaround until a patch is available.Correção
Unrestricted File Upload
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Trend Micro Mobile Security