CVE-2020-24563: trend micro trend micro apex one Improper Authentication

Vulnerability summary

CVE-2020-24563 is a high (CVSS 7.8) Improper Authentication vulnerability in trend micro trend micro apex one. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 33.5% of scored vulnerabilities.

Timeline

1. 28-09-2020
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option (if configured), which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit this vulnerability.

• CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.