Origin Validation Vulnerability in Trend Micro Apex One Security Agent

CVE-2023-47197

Summary

An origin validation vulnerability exists within the Trend Micro Apex One security agent that can be exploited by local attackers. This flaw enables unauthorized privilege escalation on compromised installations. For successful exploitation, the attacker must first gain the ability to execute low-privileged code on the affected system. This vulnerability bears resemblance to another identified issue but is distinct in its specifics, broadening the scope of potential local threats to users of the Apex One product.

References