Lucene search

K
zdiAbdelhamid NaceriZDI-22-1296
HistorySep 23, 2022 - 12:00 a.m.

Trend Micro Deep Security Link Following Local Privilege Escalation Vulnerability

2022-09-2300:00:00
Abdelhamid Naceri
www.zerodayinitiative.com
20

0.0004 Low

EPSS

Percentile

16.0%

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Deep Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Trend Micro Anti-Malware Solution Platform. By creating a symbolic link, an attacker can abuse the service to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.

0.0004 Low

EPSS

Percentile

16.0%

Related for ZDI-22-1296