CVE Vulnerabilities

CVE-2023-25144

Published: Mar 10, 2023 | Modified: Mar 06, 2025
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitrary directories with arbitrary ownership.

Affected Software

NameVendorStart VersionEnd Version
Apex_oneTrendmicro*14.0.11960 (excluding)
Apex_oneTrendmicro2019 (including)2019 (including)

References