7.5
CVE-2022-23119
- EPSS 22.25%
- Veröffentlicht 20.01.2022 19:15:07
- Zuletzt bearbeitet 21.11.2024 06:48:02
- Erkennungen
LoginA directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to read arbitrary files from the file system. Please note: an attacker must first obtain compromised access to the target Deep Security Manager (DSM) or the target agent must be not yet activated or configured in order to exploit this vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Trendmicro ≫ Deep Security Agent SwEdition long_term_support Version >= 20.0 < 20.0.0-3445
Trendmicro ≫ Deep Security Agent Version 10.0 Update - SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update1 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update10 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update11 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update12 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update13 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update14 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update15 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update16 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update17 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update18 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update19 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update2 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update20 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update21 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update22 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update23 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update24 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update25 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update26 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update27 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update28 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update29 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update3 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update30 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update31 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update4 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update5 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update6 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update7 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update8 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update9 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update - SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update1 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update10 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update11 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update12 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update13 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update14 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update15 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update16 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update17 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update18 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update19 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update2 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update20 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update21 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update22 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update23 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update24 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update25 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update26 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update27 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update3 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update4 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update5 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update6 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update7 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update8 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update9 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update - SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update1 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update10 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update11 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update12 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update13 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update14 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update15 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update16 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update17 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update18 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update19 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update2 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update20 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update21 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update3 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update4 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update5 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update6 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update7 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update8 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update9 SwEdition long_term_support
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 22.25% | 0.974 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:N
|
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
https://success.trendmicro.com/solution/000290104
https://www.modzero.com/advisories/MZ-21-02-Trendmicro.txt