CVE-2024-55955 — Trend Micro, Inc. / Trend Micro Deep Security

CVE-2024-55955

Trend Micro, Inc. / Trend Micro Deep Security PUBLISHED

Description (CNA)

An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected (CNA)

Vendor / product	Versions
Trend Micro, Inc. / Trend Micro Deep Security	affected 20 before 20.0.1-23340

CWE

CWE-427

References

https://success.trendmicro.com/en-US/solution/KA-0018571

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.