Common Weakness Enumeration
CWE-1106
ProhibitedInsufficient Use of Symbolic Constants
Abstraction: Base · Status: Incomplete
The source code uses literal constants that may need to change or evolve over time, instead of using symbolic constants.
1 vulnerability references this CWE, most recent first.
GHSA-7333-WPQM-63V7
Vulnerability from github – Published: 2024-06-11 00:30 – Updated: 2024-06-11 00:30
VLAI
Details
A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Severity
7.8 (High)
{
"affected": [],
"aliases": [
"CVE-2024-36358"
],
"database_specific": {
"cwe_ids": [
"CWE-1106"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-10T22:15:11Z",
"severity": "HIGH"
},
"details": "A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.",
"id": "GHSA-7333-wpqm-63v7",
"modified": "2024-06-11T00:30:40Z",
"published": "2024-06-11T00:30:40Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36358"
},
{
"type": "WEB",
"url": "https://success.trendmicro.com/dcx/s/solution/000298151"
},
{
"type": "WEB",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-575"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
No mitigation information available for this CWE.
No CAPEC attack patterns related to this CWE.