CVE-2023-38624: Trend Micro Apex Central modTMSL Server-Side Request Forgery Vulnerability
A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-38625 through CVE-2023-38627.
Other sources
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the modTMSL module. The issue results from the lack of proper validation of a URI prior to accessing resources. An attacker can leverage this vulnerability to disclose information in the context of the service account.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-38624?
CVE-2023-38624 is classified as a moderate severity vulnerability impacting Trend Micro Apex Central 2019.
How do I fix CVE-2023-38624?
To mitigate CVE-2023-38624, upgrade Trend Micro Apex Central to build 6481 or higher.
What systems are affected by CVE-2023-38624?
CVE-2023-38624 affects Trend Micro Apex Central 2019 installations below build 6481 on Windows.
What type of vulnerability is CVE-2023-38624?
CVE-2023-38624 is a post-authenticated server-side request forgery (SSRF) vulnerability.
How can an attacker exploit CVE-2023-38624?
An attacker can exploit CVE-2023-38624 by interacting with internal or local services after acquiring low privileges.