Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3wpp-5prr-27h8

Опубликовано: 10 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific file into a pseudo-symlink, allowing privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific file into a pseudo-symlink, allowing privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

EPSS

Процентиль: 18%
0.00056
Низкий

7.8 High

CVSS3

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 7.8
nvd
почти 3 года назад

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific file into a pseudo-symlink, allowing privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

CVSS3: 7.8
fstec
почти 3 года назад

Уязвимость механизма обнаружения вредоносных сценариев Browser Exploit Detection (TmsaInstance64.exe) антивирусных программных средств Trend Micro Apex One и Apex One as a Service, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 18%
0.00056
Низкий

7.8 High

CVSS3

Дефекты

CWE-59