PT-2023-9228 · Trend Micro · Trend Micro Apex One

CVE-2024-37289

·

Publicado

2023-08-22

·

Atualizado

2024-10-25

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Trend Micro Apex One (affected versions not specified)
Description An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. The vulnerability is related to insufficient access control to the Suspect folder. To exploit this vulnerability, an attacker must first obtain the ability to execute low-privileged code on the target system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2024-04982
CVE-2024-37289
ZDI-24-577

Produtos afetados

Trend Micro Apex One