CVE-2021-42101: Trend Micro Apex One Uncontrolled Search Path Element Privilege Escalation Vulnerability
An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar but not identical to CVE-2021-42103.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The process loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-42101?
The severity of CVE-2021-42101 is rated as high due to the potential for local privilege escalation.
How do I fix CVE-2021-42101?
To fix CVE-2021-42101, apply the latest security updates from Trend Micro for Apex One.
What versions of Trend Micro Apex One are affected by CVE-2021-42101?
CVE-2021-42101 affects Trend Micro Apex One version 2019.
Can CVE-2021-42101 be exploited remotely?
No, CVE-2021-42101 requires local access to the system for exploitation.
What type of attack does CVE-2021-42101 enable?
CVE-2021-42101 enables local attackers to escalate their privileges on affected installations.