CVE-2024-46902

Опубликовано: 22 окт. 2024

Источник: nvd

CVSS3: 8.4

CVSS3: 9.1

EPSS Низкий

Описание

A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations.

Please note: an attacker must first obtain the ability to execute high-privileged code (admin user rights) on the target system in order to exploit this vulnerability.

Ссылки

https://success.trendmicro.com/en-US/solution/KA-0017793
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-24-1227/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:trendmicro:deep_discovery_inspector:*:*:*:*:*:*:*:*

Версия от 5.8 (включая) до 6.6 (исключая)

cpe:2.3:a:trendmicro:deep_discovery_inspector:6.6:1078:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_discovery_inspector:6.6:1080:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_discovery_inspector:6.7:1077:*:*:*:*:*:*

cpe:2.3:a:trendmicro:deep_discovery_inspector:6.7:1086:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.0029

Низкий

8.4 High

CVSS3

9.1 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-8fx5-jxm5-jcpr

CVSS3: 8.4

github

больше 1 года назад

A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute high-privileged code (admin user rights) on the target system in order to exploit this vulnerability.

EPSS

Процентиль: 52%

0.0029

Низкий

8.4 High

CVSS3

9.1 Critical

CVSS3

Дефекты

CWE-89