CVE-2023-25145

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One (affected versions not specified)

Description The issue is related to a link following vulnerability in the scanning function of the Trend Micro Apex One agent. This could allow a local attacker to escalate privileges on affected installations. To exploit this vulnerability, an attacker must first obtain the ability to execute low-privileged code on the target system. The vulnerability is also associated with incorrect link resolution before accessing a file in the Apex One NT RealTime Scan service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.