Local File Manipulation Vulnerability in Trend Micro Apex One Agent

CVE-2023-25146

What is CVE-2023-25146?

A vulnerability has been identified in the Trend Micro Apex One agent, allowing local attackers to exploit security agent link following mechanisms. This can enable them to quarantine a targeted file, subsequently delete the original folder, and replace it with a junction pointing to an arbitrary location. This results in unauthorized file placement in unintended areas of the system. For exploitation, an attacker must first execute low-privileged code on the target system, making it crucial for users to apply necessary mitigations to protect sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References