CVEvulnerability
CVE-2018-18332
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-12-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-732
Description
A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on vulnerable installations.
Affected configurations
• trendmicro officescan xg
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- https://success.trendmicro.com/solution/1121674 Mitigation, Vendor Advisory
- https://success.trendmicro.com/solution/1121674 Mitigation, Vendor Advisory