CVE-2022-30523

Katalog CVE

CVSS 7.8 · High EPSS 0,41%

Kerentanan Improper Link Resolution Before File Access ('Link Following') pada trendmicro password manager. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow a low privileged local attacker to delete the contents of an arbitrary folder as SYSTEM which can then be used for privilege escalation on the affected machine.

Rincian

Terbit di NVD

16 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-59: Improper Link Resolution Before File Access ('Link Following')

EPSS (30 hari)

0,41% peluang dieksploitasi; lebih tinggi dari 33,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpcenter.trendmicro.com/en-us/article/tmka-09071 advisory vendor
• https://www.zerodayinitiative.com/advisories/ZDI-22-759/ advisory pihak ketiga · vdb entry