CVE-2021-32465: trend micro trend micro apex one Improper Preservation of Permissions

Vulnerability summary

CVE-2021-32465 is a high (CVSS 8.8) Improper Preservation of Permissions vulnerability in trend micro trend micro apex one. EPSS estimates a 4.34% chance of exploitation in the next 30 days, higher than 91% of scored vulnerabilities.

Timeline

1. 04-08-2021
   PublishedVulnerability first disclosed.
2. 03-08-2024
   Last modifiedVulnerability information updated.

Description

An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass authentication on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

• CWE-281Improper Preservation of PermissionsThe product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.