CVE-2024-46902

A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute high-privileged code (admin user rights) on the target system in order to exploit this vulnerability.

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - security@trendmicro.com

Published

2024-10-22

Last modified

2024-10-22

Weaknesses

CWE-89

Affected products

• Trend Micro Deep Discovery Inspector (Trend Micro Inc.)
• Deep Discovery Inspector (Trendmicro)

References

• https://success.trendmicro.com/en-US/solution/KA-0017793
• https://www.zerodayinitiative.com/advisories/ZDI-24-1227/