PT-2021-5425 · Trend Micro · Trend Micro Worry-Free Business Security
Izobashi
+1
·
Published
2021-06-25
·
Updated
2021-12-06
·
CVE-2021-44019
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Trend Micro Worry-Free Business Security version 10.0 SP1
Description
The issue is related to unnecessary privileges in Trend Micro Worry-Free Business Security, which could allow a local attacker to escalate privileges on affected installations. To exploit this, an attacker must first obtain the ability to execute low-privileged code on the target system. This vulnerability is similar to, but not identical to, other known issues. It is associated with inadequate access control, which may allow an attacker to elevate their privileges and execute arbitrary code.
Recommendations
For Trend Micro Worry-Free Business Security version 10.0 SP1, consider applying security patches or updates as soon as they become available to fix the unnecessary privilege vulnerability. As a temporary workaround, restrict access to sensitive areas of the system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Access Control
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Trend Micro Worry-Free Business Security