An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass authentication on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
References
Link | Resource |
---|---|
https://success.trendmicro.com/jp/solution/000287796 | Vendor Advisory |
https://success.trendmicro.com/solution/000287819 | Vendor Advisory |
https://www.zerodayinitiative.com/advisories/ZDI-21-911/ | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2021-08-04 19:15
Updated : 2024-02-28 18:28
NVD link : CVE-2021-32465
Mitre link : CVE-2021-32465
CVE.ORG link : CVE-2021-32465
JSON object : View
Products Affected
trendmicro
- apex_one
- officescan
CWE
CWE-281
Improper Preservation of Permissions