Link Following Privilege Escalation in Trend Micro Password Manager

CVE-2022-30523

What is CVE-2022-30523?

The Trend Micro Password Manager, specifically versions up to 5.0.0.1266, suffers from a Link Following Privilege Escalation vulnerability. This flaw allows a local attacker with low privileges to exploit the software and gain SYSTEM-level access to delete the contents of an arbitrary folder. This capability could potentially lead to further privilege escalation on the affected machine, providing attackers with elevated permissions and access to sensitive information. Users of affected versions are advised to apply necessary security patches and updates available from Trend Micro.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References