Lucene search

K
zdi@Kharosx0ZDI-22-759
HistoryMay 11, 2022 - 12:00 a.m.

Trend Micro Password Manager Link Following Privilege Escalation Vulnerability

2022-05-1100:00:00
@Kharosx0
www.zerodayinitiative.com
21
vulnerability
privilege escalation
trend micro password manager
symbolic link
arbitrary code
system context

EPSS

0

Percentile

15.9%

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Password Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Trend Micro Password Manager Service. By creating a symbolic link, an attacker can abuse the service to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.

EPSS

0

Percentile

15.9%

Related for ZDI-22-759