Privilege Escalation Vulnerability in Trend Micro Apex One
CVE-2023-52090
Key Information:
- Vendor
- Trend Micro
- Vendor
- CVE Published:
- 23 January 2024
Summary
A link following vulnerability exists in Trend Micro Apex One that could enable a local attacker to escalate privileges on vulnerable installations. This vulnerability requires the attacker to have already executed low-privileged code on the affected system, which could lead to unauthorized access and manipulation of sensitive data or system resources. Effective mitigation measures are crucial to safeguard against potential exploits. Organizations using Trend Micro Apex One should assess their environments and apply necessary security updates to minimize the risks associated with this vulnerability.
Affected Version(s)
Trend Micro Apex One 2019 (14.0) < 14.0.0.12534
Trend Micro Apex One as a Service SaaS < 14.0.12849
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved