A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
This vulnerability is similar to, but not identical to, CVE-2023-47200.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Apex_one | Trendmicro | * | 14.0.12737 (excluding) |
| Apex_one | Trendmicro | 2019 (including) | 2019 (including) |