PT-2022-4663
CVE-2022-38764
·
Published
2022-08-25
·
Updated
2022-09-21
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Trend Micro HouseCall versions 1.62.1.1133 and below
Description
The issue is related to incorrect permission assignment, which could allow a local attacker to escalate privileges due to an overly permissive folder in the product installer. This could potentially enable a remote attacker to elevate their privileges.
Recommendations
For Trend Micro HouseCall versions 1.62.1.1133 and below, consider restricting access to the overly permissive folder in the product installer as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾