Versio.io

CVE-2022-24680

Common vulnerabilities & exposures (CVE)

CVE databaseCVE database blogpostRelease & EoL database
 
Published at: - 24-02-2022 04:15
Last modified: - 03-03-2022 03:14
Total changes: - 2

Description

A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow a local attacker to create a mount point and leverage this for arbitrary folder deletion, leading to escalated privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Low
Attack complexity
Local
Attack vector
High
Availability
High
Confidentiality
High
Integrity
Low
Privileges required
Unchanged
Scope
None
User interaction
7.8
Base score
1.8
5.9
Exploitability score
Impact score
 

Verification logic

AND
OR
vendor=trendmicro AND product=apex_one AND version=- AND software_edition=saas
vendor=trendmicro AND product=apex_one AND version=2019
vendor=trendmicro AND product=worry-free_business_security AND version=10.0 AND update=sp1
vendor=trendmicro AND product=worry-free_business_security_services AND version=- AND software_edition=saas
OR
vendor=microsoft AND product=windows AND version=-
 

Reference

  • N/A-Third Party Advisory, VDB Entry
  • N/A-Patch, Vendor Advisory
  • N/A-Patch, Vendor Advisory
 


Keywords

NVD

 

CVE-2022-24680

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures

 

We use cookies to ensure that we give you the best experience on our website. Read privacy policies for more information.