Skip to content
OpenAdvisories
Unscored CVE-2022-24680 EUVD-2022-29552GHSA-qx5j-pc38-3g95

A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro …

Published Feb 24, 2022 · Updated Aug 3, 2024 · Assigned by trendmicro

Description

A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow a local attacker to create a mount point and leverage this for arbitrary folder deletion, leading to escalated privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected products

VendorProductAffectedFixed
Trend Micro Trend Micro Apex One 2019, SaaS —
Trend Micro Trend Micro Worry-Free Business Security 10.0 SP1, Services (SaaS) —

References