Credential disclosure via plaintext process memory

Information disclosure in Trend Micro Password Manager 3.8 allows local users to extract stored credentials by scanning process memory. Password Manager retains login IDs and passwords in plaintext in process memory under certain conditions, allowing a memory scan to recover them. Exploitation requires access to a local account with permission to inspect the product's memory, and the reported impact is limited to disclosure of managed secrets.