Local File Inclusion Vulnerability in Trend Micro Apex One Management Server

CVE-2023-47202

What is CVE-2023-47202?

A local file inclusion vulnerability in the Trend Micro Apex One management server permits an attacker with local access to exploit the system. This vulnerability can lead to privilege escalation, enabling the attacker to execute unauthorized actions on affected installations. To carry out this exploit, the attacker must first gain the capability to run low-privileged code on the target system, making the initial access a prerequisite for the attack.

References