A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elevate account permissions on vulnerable installations. An attacker must already have at least guest privileges in order to exploit this vulnerability.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Officescan | Trendmicro | 11.0-sp1 (including) | 11.0-sp1 (including) |
| Officescan | Trendmicro | xg (including) | xg (including) |
| Officescan | Trendmicro | xg-sp1 (including) | xg-sp1 (including) |