CVE-2024-36307: Trend Micro Apex One Security Agent Link Following Information Disclosure Vulnerability
A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information about the agent on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Other sources
This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the VsApiNT module. By creating a mount point, an attacker can abuse the agent to disclose the contents of a file. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36307?
CVE-2024-36307 is classified as a medium severity vulnerability.
How do I fix CVE-2024-36307?
To fix CVE-2024-36307, ensure that you are running the latest version of Trend Micro Apex One with all security patches applied.
Who is affected by CVE-2024-36307?
CVE-2024-36307 affects installations of Trend Micro Apex One and Apex One as a Service.
Can CVE-2024-36307 be exploited remotely?
No, CVE-2024-36307 requires local access to exploit the vulnerability.
What type of information can be disclosed due to CVE-2024-36307?
CVE-2024-36307 could allow an attacker to disclose sensitive information about the Trend Micro agent on affected installations.