CVE-2018-10508

A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elevate account permissions on vulnerable installations. An attacker must already have at least guest privileges in order to exploit this vulnerability.

Score

CVSS 3.0 8.8 High

Status

Modified - security@trendmicro.com

Published

2018-06-12

Last modified

2024-08-05

Affected products

• Trend Micro Officescan (Trend Micro)
• Officescan (Trendmicro)

References

• https://success.trendmicro.com/solution/1119961