Skip to content
OpenAdvisories
Unscored CVE-2021-45231 EUVD-2021-32011GHSA-c7c6-gf69-v976

A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security…

Published Jan 8, 2022 · Updated Aug 4, 2024 · Assigned by trendmicro

Description

A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to create a specially crafted file with arbitrary content which could grant local privilege escalation on the affected system. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected products

VendorProductAffectedFixed
Trend Micro Trend Micro Apex One 2019, SaaS —
Trend Micro Trend Micro Worry-Free Business Security 10.0 SP1, Services (SaaS) —

References