Privilege Escalation Vulnerability in Trend Micro Apex One
CVE-2023-52090

7.8HIGH

Key Information:

Vendor
CVE Published:
23 January 2024

Summary

A link following vulnerability exists in Trend Micro Apex One that could enable a local attacker to escalate privileges on vulnerable installations. This vulnerability requires the attacker to have already executed low-privileged code on the affected system, which could lead to unauthorized access and manipulation of sensitive data or system resources. Effective mitigation measures are crucial to safeguard against potential exploits. Organizations using Trend Micro Apex One should assess their environments and apply necessary security updates to minimize the risks associated with this vulnerability.

Affected Version(s)

Trend Micro Apex One 2019 (14.0) < 14.0.0.12534

Trend Micro Apex One as a Service SaaS < 14.0.12849

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.