PT-2021-19712
CVE-2021-32460
·
Published
2021-05-21
·
Updated
2021-06-15
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Trend Micro Maximum Security version 17
Description:
The issue is related to an improper access control vulnerability in the installer, which could allow a local attacker to escalate privileges on a target machine. The attacker must already have local user privileges and access on the machine to exploit this issue.
Recommendations:
For version 17, update to a newer version that addresses the improper access control vulnerability in the installer to prevent privilege escalation.
Found an issue in the description? Have something to add? Feel free to write us 👾