Local Privilege Escalation Vulnerability in Trend Micro Apex One
CVE-2024-52049
7.8HIGH
Key Information:
- Vendor
Trend Micro
- Vendor
- CVE Published:
- 31 December 2024
What is CVE-2024-52049?
A security vulnerability in Trend Micro Apex One related to LogServer links permits a local attacker to escalate privileges on compromised installations. While similar to another identified vulnerability, it presents distinct challenges. Exploitation requires the adversary to have already executed low-privileged code on the target system. This highlights a significant risk, as successful exploitation may allow unauthorized users to gain elevated access and perform potentially harmful actions within the affected system.
Affected Version(s)
Trend Micro Apex One 2019 (14.0) < 14.0.0.13140
Trend Micro Apex One as a Service SaaS < 14.0.14203