CVE-2023-25144

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One (affected versions not specified)

Description The issue is related to improper access control in the Trend Micro Apex One agent, which could allow a local attacker to gain elevated privileges. This can enable the creation of arbitrary directories with arbitrary ownership. The vulnerability is also associated with insufficient access control to the Suspect folder.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.