CVE-2021-42102: Trend Micro Apex One Uncontrolled Search Path Element Privilege Escalation Vulnerability
An uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service agents could allow a local attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The process loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-42102?
The severity of CVE-2021-42102 is categorized as high due to the potential for privilege escalation by local attackers.
How do I fix CVE-2021-42102?
To fix CVE-2021-42102, ensure that you update to the latest version of Trend Micro Apex One that addresses this vulnerability.
Who is affected by CVE-2021-42102?
Users of Trend Micro Apex One 2019 and Apex One as a Service are affected by CVE-2021-42102.
What kind of attack does CVE-2021-42102 allow?
CVE-2021-42102 allows local attackers to escalate privileges on affected installations after executing low-privileged code.
When was CVE-2021-42102 published?
CVE-2021-42102 was published in 2021 as part of ongoing security assessments of Trend Micro products.