CVE-2020-24563: Trend Micro Apex One Authentication Bypass Vulnerability
A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option (if configured), which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit this vulnerability.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ApexOne Security Agent. The issue results from allowing authentication to be bypassed via a modified client that omits the authentication check. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-24563?
CVE-2020-24563 has a medium severity rating due to its potential for privilege escalation and code execution.
How do I fix CVE-2020-24563?
To fix CVE-2020-24563, ensure that the latest security updates for Trend Micro Apex One are applied.
Who is affected by CVE-2020-24563?
CVE-2020-24563 affects users of Trend Micro Apex One versions 2019 and SaaS implementations.
What type of attack is CVE-2020-24563 associated with?
CVE-2020-24563 is associated with local privilege escalation attacks.
What is the potential impact of CVE-2020-24563?
The potential impact of CVE-2020-24563 includes unauthorized code execution and elevated privileges within the system.