Link Following Privilege Escalation in Trend Micro Password Manager

CVE-2022-30523

What is CVE-2022-30523?

The Trend Micro Password Manager, specifically versions up to 5.0.0.1266, suffers from a Link Following Privilege Escalation vulnerability. This flaw allows a local attacker with low privileges to exploit the software and gain SYSTEM-level access to delete the contents of an arbitrary folder. This capability could potentially lead to further privilege escalation on the affected machine, providing attackers with elevated permissions and access to sensitive information. Users of affected versions are advised to apply necessary security patches and updates available from Trend Micro.

References