Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m868-6r8g-x6r5

Опубликовано: 17 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

EPSS

Процентиль: 12%
0.0004
Низкий

8.8 High

CVSS3

Дефекты

CWE-242
CWE-89

Связанные уязвимости

CVSS3: 8.8
nvd
8 месяцев назад

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

CVSS3: 8.8
fstec
8 месяцев назад

Уязвимость функции GetGroupFilteredUsers сервера PolicyServer средства шифрования данных Trend Micro Endpoint Encryption (TMEE), позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 12%
0.0004
Низкий

8.8 High

CVSS3

Дефекты

CWE-242
CWE-89