SQL Injection Privilege Escalation in Trend Micro Endpoint Encryption PolicyServer

Successful exploitation can allow an attacker to escalate privileges on the affected Endpoint Encryption PolicyServer installation. In practical terms, this can let an attacker who already has low-privileged code execution or equivalent authenticated access increase their level of control over the system and potentially contribute to broader compromise when chained with other vulnerabilities.

If immediate patching is not possible, reduce exposure by restricting access to the PolicyServer environment, limiting the ability to obtain or use low-privileged execution on the host, minimizing authenticated access to the application, and monitoring for anomalous database-related activity or unexpected privilege changes. Because exploitation is post-authentication and requires an existing foothold, hardening local access paths and preventing initial compromise are important interim measures. Specific vendor-provided mitigations beyond patching are not currently available in the provided information.

Apply Trend Micro Endpoint Encryption PolicyServer Patch 1 Update 6 and ensure the product is updated to version 6.0.0.4013 or later, as vulnerable versions older than 6.0.0.4013 without Patch 1 Update 6 are affected according to the available information.