PT-2023-9228 · Trend Micro · Trend Micro Apex One
CVE-2024-37289
·
Publicado
2023-08-22
·
Atualizado
2024-10-25
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Trend Micro Apex One (affected versions not specified)
Description
An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. The vulnerability is related to insufficient access control to the Suspect folder. To exploit this vulnerability, an attacker must first obtain the ability to execute low-privileged code on the target system.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Trend Micro Apex One