CVE-2022-23119: trendmicro deep security agent

csirt@kutim:~/threat-intel/cve/CVE-2022-23119

CVSS 7.5 · High EPSS 22,3%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada trendmicro deep security agent. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to read arbitrary files from the file system. Please note: an attacker must first obtain compromised access to the target Deep Security Manager (DSM) or the target agent must be not yet activated or configured in order to exploit this vulnerability.

Rincian

Terbit di NVD: 20 Januari 2022
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
EPSS (30 hari): 22,3% peluang dieksploitasi; lebih tinggi dari 97,6% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
trendmicro	deep security agent	Versi 20.0 hingga sebelum 20.0.0-3445
trendmicro	deep security agent	Versi 10.0
trendmicro	deep security agent	Versi 10.0 update1
trendmicro	deep security agent	Versi 10.0 update10
trendmicro	deep security agent	Versi 10.0 update11
trendmicro	deep security agent	Versi 10.0 update12
trendmicro	deep security agent	Versi 10.0 update13
trendmicro	deep security agent	Versi 10.0 update14
trendmicro	deep security agent	Versi 10.0 update15
trendmicro	deep security agent	Versi 10.0 update16
trendmicro	deep security agent	Versi 10.0 update17
trendmicro	deep security agent	Versi 10.0 update18
trendmicro	deep security agent	Versi 10.0 update19
trendmicro	deep security agent	Versi 10.0 update2
trendmicro	deep security agent	Versi 10.0 update20
trendmicro	deep security agent	Versi 10.0 update21
trendmicro	deep security agent	Versi 10.0 update22
trendmicro	deep security agent	Versi 10.0 update23
trendmicro	deep security agent	Versi 10.0 update24
trendmicro	deep security agent	Versi 10.0 update25
trendmicro	deep security agent	Versi 10.0 update26
trendmicro	deep security agent	Versi 10.0 update27
trendmicro	deep security agent	Versi 10.0 update28
trendmicro	deep security agent	Versi 10.0 update29
trendmicro	deep security agent	Versi 10.0 update3
trendmicro	deep security agent	Versi 10.0 update30
trendmicro	deep security agent	Versi 10.0 update31
trendmicro	deep security agent	Versi 10.0 update4
trendmicro	deep security agent	Versi 10.0 update5
trendmicro	deep security agent	Versi 10.0 update6
trendmicro	deep security agent	Versi 10.0 update7
trendmicro	deep security agent	Versi 10.0 update8
trendmicro	deep security agent	Versi 10.0 update9
trendmicro	deep security agent	Versi 11.0
trendmicro	deep security agent	Versi 11.0 update1
trendmicro	deep security agent	Versi 11.0 update10
trendmicro	deep security agent	Versi 11.0 update11
trendmicro	deep security agent	Versi 11.0 update12
trendmicro	deep security agent	Versi 11.0 update13
trendmicro	deep security agent	Versi 11.0 update14
trendmicro	deep security agent	Versi 11.0 update15
trendmicro	deep security agent	Versi 11.0 update16
trendmicro	deep security agent	Versi 11.0 update17
trendmicro	deep security agent	Versi 11.0 update18
trendmicro	deep security agent	Versi 11.0 update19
trendmicro	deep security agent	Versi 11.0 update2
trendmicro	deep security agent	Versi 11.0 update20
trendmicro	deep security agent	Versi 11.0 update21
trendmicro	deep security agent	Versi 11.0 update22
trendmicro	deep security agent	Versi 11.0 update23
trendmicro	deep security agent	Versi 11.0 update24
trendmicro	deep security agent	Versi 11.0 update25
trendmicro	deep security agent	Versi 11.0 update26
trendmicro	deep security agent	Versi 11.0 update27
trendmicro	deep security agent	Versi 11.0 update3
trendmicro	deep security agent	Versi 11.0 update4
trendmicro	deep security agent	Versi 11.0 update5
trendmicro	deep security agent	Versi 11.0 update6
trendmicro	deep security agent	Versi 11.0 update7
trendmicro	deep security agent	Versi 11.0 update8

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 83 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

https://success.trendmicro.com/solution/000290104 mitigasi · patch · advisory vendor
https://www.modzero.com/advisories/MZ-21-02-Trendmicro.txt exploit · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.