PT-2020-16199

CVE-2020-25775

·

Published

2020-09-28

·

Updated

2020-10-07

Description by

CVSS 3.1
6.3
Medium
MetricsAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions Trend Micro Security 2020 version 16
Description The issue allows an unprivileged user to manipulate the product's secure erase feature to delete files with a higher set of privileges due to a security race condition arbitrary file deletion vulnerability.
Recommendations For Trend Micro Security 2020 version 16, consider restricting access to the secure erase feature until a patch is available to prevent exploitation of this issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ZDI-20-1227
Found an issue in the description? Have something to add? Feel free to write us 👾