CVE-2023-52331: Trend Micro Apex Central modVulnerabilityProtect Server-Side Request Forgery Information Disclosure Vulnerability
A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Other sources
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the modVulnerabilityProtect module. The issue results from the lack of proper validation of a URI prior to accessing resources. An attacker can leverage this vulnerability to disclose information in the context of the service account.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52331?
CVE-2023-52331 is classified as a medium severity vulnerability due to its potential for exploitation through server-side request forgery.
How do I fix CVE-2023-52331?
To resolve CVE-2023-52331, users should apply the latest security patches provided by Trend Micro for Apex Central.
Who is affected by CVE-2023-52331?
CVE-2023-52331 affects users of Trend Micro Apex Central, particularly those running version 2019.
What does CVE-2023-52331 allow an attacker to do?
CVE-2023-52331 allows an attacker to perform server-side request forgery, enabling interaction with internal or local services.
Is authentication required to exploit CVE-2023-52331?
Yes, an attacker must first authenticate and execute low-privileged code on the target system to exploit CVE-2023-52331.