Skip to content
OpenAdvisories
Unscored CVE-2022-24679 EUVD-2022-29551GHSA-wc94-2wcf-jwvr

A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro …

Published Feb 24, 2022 · Updated Aug 3, 2024 · Assigned by trendmicro

Description

A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow a local attacker to create an writable folder in an arbitrary location and escalate privileges affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected products

VendorProductAffectedFixed
Trend Micro Trend Micro Apex One 2019, SaaS —
Trend Micro Trend Micro Worry-Free Business Security 10.0 SP1, Services (SaaS) —

References