CVE-2018-18332 Vulnerability Details

  /     /     /  

CVE-2018-18332 Metadata Quick Info

CVE Published: 21/12/2018 | CVE Updated: 05/08/2024 | CVE Year: 2018
Source: trendmicro | Vendor: Trend Micro | Product: Trend Micro OfficeScan
Status : PUBLISHED

---

CVE-2018-18332 Description

A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on vulnerable installations.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Weak File Permissions
Source: Trend Micro

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).