CVE-2024-55955: High severity trend micro deep security manager vulnerability
An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-55955?
CVE-2024-55955 has been rated as a medium severity vulnerability due to potential privilege escalation risks.
How do I fix CVE-2024-55955?
To fix CVE-2024-55955, update the Trend Micro Deep Security agents to a version later than 20.0.1-23340.
What are the affected versions of Trend Micro Deep Security for CVE-2024-55955?
CVE-2024-55955 affects Trend Micro Deep Security versions between 20.0.1-9400 and 20.0.1-23340.
Can exploitation of CVE-2024-55955 lead to data compromise?
Yes, exploitation of CVE-2024-55955 can allow a local attacker to escalate privileges, potentially leading to data compromise.
Is remote access required to exploit CVE-2024-55955?
No, exploitation of CVE-2024-55955 requires local access to the vulnerable system.